Daily Tech Briefing
AI 科技速览
每天 5 分钟内学习 AI。获取最新的人工智能新闻,理解其重要性,并学习如何将其应用于您的工作。
arXiv AI · 2026/7/31 15:35:57
ARB: A Matched Authorship-Rewriting Benchmark Dataset for AI-Text Detector Evaluation
AI 中文解读
核心亮点:一项新研究给AI检测器做了一次“突击考试”,结果发现它们能轻易识破AI直接写的文章,却对“AI改写真人文章”这种更隐蔽的作弊方式几乎无能为力。
通俗解读:以前测试AI检测器,都是拿真人写的文章和AI直接从零生成的文章做对比。但现实中,更常见的做法是:人先写一篇草稿,然后让AI帮忙润色改写。ARB数据集正是针对这种情况设计的,收集了1800篇真人文章,让四种AI模型分别直接生成、改写真人文章、改写AI文章,再拿五款主流检测器来测验。结果令人意外,检测器识别“AI直接生成”的准确率超过90%,但面对“AI改写的真人文章”,准确率直接跌到15%到30%,几乎形同虚设。
实际影响:这意味着,想靠AI检测工具来抓“用AI写论文”“用AI写稿子”的行为,目前还不可靠。学生或写手只要先自己写个初稿,再让大模型帮忙“润色”,就能轻松绕过现有的检测系统。对于媒体、教育、出版等行业来说,判断内容是否真由人类创作将变得更加困难。这也提醒开发者,需要针对“AI改写”这一路径设计更强健的检测技术,才能真正应对现实中的AI造假场景。
Standard AI-text detection benchmarks compare human-written text against text generated directly by large language models (LLMs). While prior work has shown that rewriting and paraphrasing can degrade detector performance, it remains unclear whether performance measured on this conventional benchmark predicts detector behavior when human-authored content is rewritten by an LLM. To address this gap, we introduce Authorship-Rewriting Benchmark (ARB), built from 1,800 human source texts (600 each from XSum, WritingPrompts, and OpenWebText) and four open-weight generators (Llama-3.2-3B, Qwen2.5-7B, Mistral-7B, Gemma-2-9B). Each source item yields four matched variants: human-written (HUMAN), direct LLM generation (Free-LLM), LLM-rewritten human text (H2L), and same-generator LLM-rewritten LLM text (LLM2L). We evaluated five detectors (FastDetectGPT, Binoculars-falcon-7b, RADAR, BERT-Defense, RoBERTa-Defense) at a strict 1%-false-positive operating point (TPR@1%FPR). FastDetectGPT and Binoculars-falcon-7b detected 91.2% and 93.5\% of direct LLM text, but only 30.8% and 15.1% of human text an LLM had rewritten, a drop of 60-78 percentage points. The same detectors retained 78.3% and 83.0% recall when LLM text was rewritten by the same model, a much smaller decline of 10-13 points. RADAR followed the same pattern (66.8% to 12.2%), while BERT-Defense and RoBERTa-Defense stayed below 3% recall across all regimes. These results show that detector performance measured on the conventional human-vs-LLM benchmark does not transfer to human-authored text revised by an LLM, even though the same detectors remain largely robust to LLM-only rewriting.
分享
阅读原文 ↗