{"id":"https://openalex.org/W7123734353","doi":"https://doi.org/10.48550/arxiv.2601.06884","title":"Paraphrasing Adversarial Attack on LLM-as-a-Reviewer","display_name":"Paraphrasing Adversarial Attack on LLM-as-a-Reviewer","publication_year":2026,"publication_date":"2026-01-11","ids":{"openalex":"https://openalex.org/W7123734353","doi":"https://doi.org/10.48550/arxiv.2601.06884"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2601.06884","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2601.06884","pdf_url":"https://arxiv.org/pdf/2601.06884","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2601.06884","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128020104","display_name":"Masahiro Kaneko","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Kaneko, Masahiro","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5128020104"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.7559999823570251},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.7369999885559082},{"id":"https://openalex.org/keywords/peer-review","display_name":"peer review","score":0.7590000033378601},{"id":"https://openalex.org/keywords/paraphrasing","display_name":"paraphrase","score":0.7250000238418579},{"id":"https://openalex.org/keywords/black-box-optimization","display_name":"black-box optimization","score":0.7979999780654907},{"id":"https://openalex.org/keywords/in-context-learning","display_name":"in-context learning","score":0.7730000019073486},{"id":"https://openalex.org/keywords/prompt-injection","display_name":"prompt injection","score":0.7200000286102295},{"id":"https://openalex.org/keywords/evaluation-robustness","display_name":"evaluation robustness","score":0.7179999947547913},{"id":"https://openalex.org/keywords/semantic-equivalence","display_name":"semantic equivalence","score":0.5170000195503235},{"id":"https://openalex.org/keywords/perplexity","display_name":"perplexity","score":0.6909999847412109},{"id":"https://openalex.org/keywords/attack-detection","display_name":"attack detection","score":0.6380000114440918}],"concepts":[{"id":"https://openalex.org/C100279451","wikidata":"https://www.wikidata.org/wiki/Q372193","display_name":"Perplexity","level":3,"score":0.9258000254631042},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8902999758720398},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6718000173568726},{"id":"https://openalex.org/C2780876879","wikidata":"https://www.wikidata.org/wiki/Q3054749","display_name":"Meaning (existential)","level":2,"score":0.6043999791145325},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.5547999739646912},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5503000020980835},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5418000221252441},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.46860000491142273},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.44600000977516174},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.41130000352859497},{"id":"https://openalex.org/C37926939","wikidata":"https://www.wikidata.org/wiki/Q7449061","display_name":"Semantic equivalence","level":4,"score":0.31119999289512634},{"id":"https://openalex.org/C11693617","wikidata":"https://www.wikidata.org/wiki/Q181839","display_name":"Pragmatics","level":2,"score":0.30239999294281006},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C2780292567","wikidata":"https://www.wikidata.org/wiki/Q7102600","display_name":"Original meaning","level":3,"score":0.2639000117778778},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2621999979019165},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.2524999976158142}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2601.06884","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2601.06884","pdf_url":"https://arxiv.org/pdf/2601.06884","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2601.06884","doi":"https://doi.org/10.48550/arxiv.2601.06884","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2601.06884","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2601.06884","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2601.06884","pdf_url":"https://arxiv.org/pdf/2601.06884","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7123734353.pdf","grobid_xml":"https://content.openalex.org/works/W7123734353.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W2936695845","https://openalex.org/W4379258778","https://openalex.org/W4385374425","https://openalex.org/W4392781833","https://openalex.org/W4403885225","https://openalex.org/W4404330874","https://openalex.org/W4404341075","https://openalex.org/W4404782847","https://openalex.org/W4405035007","https://openalex.org/W4410609100","https://openalex.org/W4414593097","https://openalex.org/W4414939355","https://openalex.org/W4415090291","https://openalex.org/W4416240169","https://openalex.org/W4416259212","https://openalex.org/W4416436479","https://openalex.org/W4417077852","https://openalex.org/W4417126423","https://openalex.org/W4417295771","https://openalex.org/W4417299935","https://openalex.org/W4417348373","https://openalex.org/W4417465430","https://openalex.org/W6910426258","https://openalex.org/W6948369276","https://openalex.org/W7106226817","https://openalex.org/W7131125571","https://openalex.org/W7138085145"],"related_works":["https://openalex.org/W7159734349","https://openalex.org/W4416390699","https://openalex.org/W7212120292","https://openalex.org/W7162429774","https://openalex.org/W4415986829","https://openalex.org/W4414593097","https://openalex.org/W7221132137","https://openalex.org/W4417295771","https://openalex.org/W4407759475","https://openalex.org/W7162804100"],"abstract_inverted_index":{"The":[0],"use":[1],"of":[2],"large":[3],"language":[4],"models":[5,95],"(LLMs)":[6],"in":[7,127],"peer":[8],"review":[9,58,101],"systems":[10],"has":[11],"attracted":[12],"growing":[13],"attention,":[14],"making":[15],"it":[16],"essential":[17],"to":[18,77],"examine":[19],"their":[20,75],"potential":[21,131],"vulnerabilities.":[22],"Prior":[23],"attacks":[24],"rely":[25],"on":[26],"prompt":[27],"injection,":[28],"which":[29],"alters":[30],"manuscript":[31],"content":[32],"and":[33,64,74,85,92,116,134],"conflates":[34],"injection":[35],"susceptibility":[36],"with":[37,88],"evaluation":[38,109],"robustness.":[39],"We":[40,118],"propose":[41],"the":[42,105],"Paraphrasing":[43],"Adversarial":[44],"Attack":[45],"(PAA),":[46],"a":[47,130],"black-box":[48],"optimization":[49],"method":[50],"that":[51,97,111,121,135],"searches":[52],"for":[53],"paraphrased":[54],"sequences":[55],"yielding":[56],"higher":[57],"scores":[59,76,102],"while":[60],"preserving":[61],"semantic":[62],"equivalence":[63],"linguistic":[65],"naturalness.":[66,117],"PAA":[67,98],"leverages":[68],"in-context":[69],"learning,":[70],"using":[71],"previous":[72],"paraphrases":[73,113],"guide":[78],"candidate":[79],"generation.":[80],"Experiments":[81],"across":[82],"five":[83,93],"ML":[84],"NLP":[86],"conferences":[87],"three":[89],"LLM":[90],"reviewers":[91],"attacking":[94],"show":[96],"consistently":[99],"increases":[100],"without":[103],"changing":[104],"paper's":[106],"claims.":[107],"Human":[108],"confirms":[110],"generated":[112],"maintain":[114],"meaning":[115],"also":[119],"find":[120],"attacked":[122],"papers":[123],"exhibit":[124],"increased":[125],"perplexity":[126],"reviews,":[128],"offering":[129],"detection":[132],"signal,":[133],"paraphrasing":[136],"submissions":[137],"can":[138],"partially":[139],"mitigate":[140],"attacks.":[141]},"counts_by_year":[{"year":2026,"cited_by_count":11}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-01-14T00:00:00"}