{"id":"https://openalex.org/W4415328795","doi":"https://doi.org/10.48550/arxiv.2505.15337","title":"Your Language Model Can Secretly Write Like Humans: Contrastive Paraphrase Attacks on LLM-Generated Text Detectors","display_name":"Your Language Model Can Secretly Write Like Humans: Contrastive Paraphrase Attacks on LLM-Generated Text Detectors","publication_year":2025,"publication_date":"2025-05-21","ids":{"openalex":"https://openalex.org/W4415328795","doi":"https://doi.org/10.48550/arxiv.2505.15337"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2505.15337","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2505.15337","pdf_url":"https://arxiv.org/pdf/2505.15337","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2505.15337","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Fang, Hao","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fang, Hao","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School , Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School , Tsinghua University ,","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044674169","display_name":"Jiawei Kong","orcid":"https://orcid.org/0009-0001-4879-0668","observed_orcids":["https://orcid.org/0009-0001-4879-0668"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kong, Jiawei","raw_affiliation_strings":["Harbin Institute of Technology , Shenzhen ,","Tsinghua Shenzhen International Graduate School , Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology , Shenzhen ,","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School , Tsinghua University ,","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011723170","display_name":"Tianqu Zhuang","orcid":"https://orcid.org/0009-0006-8730-1878","observed_orcids":["https://orcid.org/0009-0006-8730-1878"]},"institutions":[{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuang, Tianqu","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School , Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School , Tsinghua University ,","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101135840","display_name":"Yixiang Qiu","orcid":"https://orcid.org/0009-0000-3444-5807","observed_orcids":["https://orcid.org/0009-0000-3444-5807"]},"institutions":[{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiu, Yixiang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School , Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School , Tsinghua University ,","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038862367","display_name":"Kuofeng Gao","orcid":"https://orcid.org/0000-0002-5667-8238","observed_orcids":["https://orcid.org/0000-0002-5667-8238"]},"institutions":[{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gao, Kuofeng","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School , Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School , Tsinghua University ,","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100427454","display_name":"Bin Chen","orcid":"https://orcid.org/0009-0002-1411-7915","observed_orcids":["https://orcid.org/0009-0002-1411-7915"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen, Bin","raw_affiliation_strings":["Harbin Institute of Technology , Shenzhen ,","Pengcheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology , Shenzhen ,","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Pengcheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100513871","display_name":"Shu-Tao Xia","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xia, Shu-Tao","raw_affiliation_strings":["Pengcheng Laboratory","Tsinghua Shenzhen International Graduate School , Tsinghua University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pengcheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School , Tsinghua University ,","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073082132","display_name":"Yaowei Wang","orcid":"https://orcid.org/0000-0002-6110-4036","observed_orcids":["https://orcid.org/0000-0002-6110-4036"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wang, Yaowei","raw_affiliation_strings":["Harbin Institute of Technology , Shenzhen ,","Pengcheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology , Shenzhen ,","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Pengcheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100618693","display_name":"Zhang Min","orcid":"https://orcid.org/0000-0003-1835-9188","observed_orcids":["https://orcid.org/0000-0003-1835-9188"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhang, Min","raw_affiliation_strings":["Harbin Institute of Technology , Shenzhen ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology , Shenzhen ,","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8291000127792358,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8291000127792358,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.04320000112056732,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.030300000682473183,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llm-generated-text-detection","display_name":"LLM-generated text detection","score":0.9639999866485596},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.5189999938011169},{"id":"https://openalex.org/keywords/academic-plagiarism","display_name":"academic plagiarism","score":0.49300000071525574}],"concepts":[{"id":"https://openalex.org/C2780922921","wikidata":"https://www.wikidata.org/wiki/Q255189","display_name":"Paraphrase","level":2,"score":0.9272000193595886},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7333999872207642},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.6223000288009644},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.5960000157356262},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5407000184059143},{"id":"https://openalex.org/C2776502983","wikidata":"https://www.wikidata.org/wiki/Q690182","display_name":"Contrast (vision)","level":2,"score":0.4702000021934509},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.45080000162124634},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.4097999930381775},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.4009999930858612},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.3474000096321106},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.33500000834465027},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.320499986410141},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.2858999967575073},{"id":"https://openalex.org/C155092808","wikidata":"https://www.wikidata.org/wiki/Q182557","display_name":"Computational linguistics","level":2,"score":0.25459998846054077}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2505.15337","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2505.15337","pdf_url":"https://arxiv.org/pdf/2505.15337","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2505.15337","doi":"https://doi.org/10.48550/arxiv.2505.15337","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2505.15337","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2505.15337","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2505.15337","pdf_url":"https://arxiv.org/pdf/2505.15337","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415328795.pdf","grobid_xml":"https://content.openalex.org/works/W4415328795.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4417126423","https://openalex.org/W4377131086","https://openalex.org/W7125702506","https://openalex.org/W4415932850","https://openalex.org/W7162001741","https://openalex.org/W4404311453","https://openalex.org/W4409561339","https://openalex.org/W7133209433","https://openalex.org/W4410396921","https://openalex.org/W4403344566"],"abstract_inverted_index":{"The":[0,85],"misuse":[1],"of":[2,15,109,181,190],"large":[3],"language":[4],"models":[5],"(LLMs),":[6],"such":[7],"as":[8,138],"academic":[9],"plagiarism,":[10],"has":[11],"driven":[12],"the":[13,38,105,142,147,151,155,159,179,182,188],"development":[14],"detectors":[16,81,195],"to":[17,29,34,48,89,96,141,165],"identify":[18],"LLM-generated":[19],"texts.":[20,100],"To":[21,65,128],"bypass":[22],"these":[23,32],"detectors,":[24],"paraphrase":[25],"attacks":[26],"have":[27],"emerged":[28],"purposely":[30],"rewrite":[31],"texts":[33,117],"evade":[35],"detection.":[36],"Despite":[37],"success,":[39],"existing":[40],"methods":[41],"require":[42],"substantial":[43],"data":[44],"and":[45,53],"computational":[46],"budgets":[47],"train":[49],"a":[50,74,139],"specialized":[51],"paraphraser,":[52],"their":[54],"attack":[55],"efficacy":[56],"greatly":[57],"reduces":[58],"when":[59],"faced":[60],"with":[61],"advanced":[62],"detection":[63],"algorithms.":[64],"address":[66],"this,":[67,130],"we":[68,102],"propose":[69],"\\textbf{Co}ntrastive":[70],"\\textbf{P}araphrase":[71],"\\textbf{A}ttack":[72],"(CoPA),":[73],"training-free":[75],"method":[76],"that":[77,93,104,122,168],"effectively":[78],"deceives":[79],"text":[80,173,194],"using":[82],"off-the-shelf":[83],"LLMs.":[84],"first":[86],"step":[87],"is":[88,163],"carefully":[90],"craft":[91],"instructions":[92],"encourage":[94],"LLMs":[95,110],"produce":[97,166],"more":[98],"human-like":[99,143,156],"Nonetheless,":[101],"observe":[103],"inherent":[106],"statistical":[107],"biases":[108],"can":[111,123],"still":[112],"result":[113],"in":[114,192],"some":[115],"generated":[116,145],"carrying":[118],"certain":[119],"machine-like":[120,135,152],"attributes":[121],"be":[124],"captured":[125],"by":[126,146,172],"detectors.":[127,174],"overcome":[129],"CoPA":[131,162,191],"constructs":[132],"an":[133],"auxiliary":[134],"word":[136],"distribution":[137,144,157],"contrast":[140],"LLM.":[148],"By":[149],"subtracting":[150],"patterns":[153],"from":[154],"during":[158],"decoding":[160],"process,":[161],"able":[164],"sentences":[167],"are":[169],"less":[170],"discernible":[171],"Our":[175],"theoretical":[176],"analysis":[177],"suggests":[178],"superiority":[180],"proposed":[183],"attack.":[184],"Extensive":[185],"experiments":[186],"validate":[187],"effectiveness":[189],"fooling":[193],"across":[196],"various":[197],"scenarios.":[198]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-09-30T09:27:27.532063","created_date":"2025-10-19T00:00:00"}