When Detection Fails: The Power of Fine-Tuned Models to Generate Human-Like Social Media Text
This addresses the problem of online influence campaigns for social media platforms and detection researchers, highlighting a critical vulnerability in current detection methods.
The study tackled the challenge of detecting AI-generated social media text by creating a dataset of over 500,000 posts from various LLMs and showing that detection accuracy drops significantly when attackers use fine-tuned models not publicly available, as confirmed by human evaluation.
Detecting AI-generated text is a difficult problem to begin with; detecting AI-generated text on social media is made even more difficult due to the short text length and informal, idiosyncratic language of the internet. It is nonetheless important to tackle this problem, as social media represents a significant attack vector in online influence campaigns, which may be bolstered through the use of mass-produced AI-generated posts supporting (or opposing) particular policies, decisions, or events. We approach this problem with the mindset and resources of a reasonably sophisticated threat actor, and create a dataset of 505,159 AI-generated social media posts from a combination of open-source, closed-source, and fine-tuned LLMs, covering 11 different controversial topics. We show that while the posts can be detected under typical research assumptions about knowledge of and access to the generating models, under the more realistic assumption that an attacker will not release their fine-tuned model to the public, detectability drops dramatically. This result is confirmed with a human study. Ablation experiments highlight the vulnerability of various detection algorithms to fine-tuned LLMs. This result has implications across all detection domains, since fine-tuning is a generally applicable and realistic LLM use case.