aiqbench analysis
This research introduces a non-parametric detection framework using multi-view Gaussian processes to improve machine text identification against adversarial attacks like paraphrasing. By aggregating evidence from complementary stylistic and structural features, the system raises the cost of evasion while providing calibrated probabilities for out-of-distribution inputs. The approach offers robust performance across diverse benchmarks without relying on parametric classifiers that struggle with distribution shifts.
Non-Parametric Machine Text Detection via Multi-View Gaussian Processes
arXiv:2606.14060v1 Announce Type: new Abstract: Adversarial conditions such as paraphrasing and targeted style transfer sharply degrade the accuracy of machine text detectors. A document, however, carries multiple complementary signals (e.g., stylistic features, likelihood and rank-order features, and structural features), and an attack that suppresses one may leave others intact. While a parametric classifier can learn to combine these features given sufficient supervision, classifiers are prone to making confidently incorrect predictions when the distribution shifts (e.g., novel attacks or unseen language models). To address this, we propose a multi-view, non-parametric detection framework that extracts complementary feature views from the same document and aggregates per-view evidence through a Gaussian process ensemble. By aggregating evidence across views, an adversary must simultaneously defeat multiple independent axes of detection, substantially raising the cost of evasion. The Gaussian process formulation additionally provides calibrated probabilities and principled abstention on out-of-distribution inputs, supporting reliable deployment in high-stakes settings. We evaluate on three benchmarks spanning diverse generators and attacks: the DetectRL and RAID benchmarks, and the PAN2025 shared task and demonstrate that our multi-view detector maintains strong performance under the considered attacks, outperforming existing approaches against held out attacks.
Abstract:Adversarial conditions such as paraphrasing and targeted style transfer sharply degrade the accuracy of machine text detectors. A document, however, carries multiple complementary signals (e.g., stylistic features, likelihood and rank-order features, and structural features), and an attack that suppresses one may leave others intact. While a parametric classifier can learn to combine these features given sufficient supervision, classifiers are prone to making confidently incorrect predictions when the distribution shifts (e.g., novel attacks or unseen language models). To address this, we propose a multi-view, non-parametric detection framework that extracts complementary feature views from the same document and aggregates per-view evidence through a Gaussian process ensemble. By aggregating evidence across views, an adversary must simultaneously defeat multiple independent axes of detection, substantially raising the cost of evasion. The Gaussian process formulation additionally provides calibrated probabilities and principled abstention on out-of-distribution inputs, supporting reliable deployment in high-stakes settings. We evaluate on three benchmarks spanning diverse generators and attacks: the DetectRL and RAID benchmarks, and the PAN2025 shared task and demonstrate that our multi-view detector maintains strong performance under the considered attacks, outperforming existing approaches against held out attacks.
Machine Learning (cs.LG); Computation and Language (cs.CL)
arXiv:2606.14060 [cs.LG]
(or arXiv:2606.14060v1 [cs.LG] for this version)
https://doi.org/10.48550/arXiv.2606.14060 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 283 words
Related coverage
Whitening Inverts the Hierarchy: What the Norm of a Whitened Embedding Measures
arXiv · Sep 22, 2026
WATCH: Adaptive Monitoring for AI Deployments via Weighted-Conformal Martingales
arXiv · Aug 19, 2026
High-dimensional nonparametric changepoint detection via low-rank degree-two density projection
arXiv · Aug 17, 2026
High-Dimensional Nonparametric Change-Point Detection via Low-Rank Degree-Three Density Projection
arXiv · Aug 19, 2026