How Vulnerable Are Automatic Fake News Detection Methods to Adversarial Attacks?
This highlights a critical security flaw in fake news detection systems, which could undermine policy initiatives aimed at combating misinformation online.
The paper tackled the vulnerability of automatic fake news detection methods to adversarial attacks, showing that state-of-the-art models can be manipulated to misclassify fake news as true news using automated techniques like Text-Attack.
As the spread of false information on the internet has increased dramatically in recent years, more and more attention is being paid to automated fake news detection. Some fake news detection methods are already quite successful. Nevertheless, there are still many vulnerabilities in the detection algorithms. The reason for this is that fake news publishers can structure and formulate their texts in such a way that a detection algorithm does not expose this text as fake news. This paper shows that it is possible to automatically attack state-of-the-art models that have been trained to detect Fake News, making these vulnerable. For this purpose, corresponding models were first trained based on a dataset. Then, using Text-Attack, an attempt was made to manipulate the trained models in such a way that previously correctly identified fake news was classified as true news. The results show that it is possible to automatically bypass Fake News detection mechanisms, leading to implications concerning existing policy initiatives.