Skip to content

Beyond Global Scalars: Synergizing Token-Level Statistics and Deep Semantics for Adversarial AIGC Text Detection

Aug 2026 · 0 citations · 33 references
Computer Science

TL;DR

The proposed NeuroStat framework captures uncompressed token-level probabilistic logits alongside deep semantic hidden states from a single causal language model backbone through Macro-State Residual Modulation, which adaptively calibrates local convolutional features using global uncertainty indicators.

Abstract

The rapid evolution of large language models necessitates robust machine-generated text detection. Existing paradigms typically follow two isolated tracks. Training-free methods rely on global statistical scalars such as perplexity, while training-based methods utilize semantic hidden states. Both approaches exhibit fundamental vulnerabilities in adversarial scenarios. Global scalars act as lossy compressions that obscure local probabilistic burstiness in interleaved texts, whereas pure semantic models overfit to specific fingerprints and remain susceptible to spoofing. To expose these flaws, we introduce MOSAIC, a comprehensive adversarial benchmark comprising 16000 samples across a full-granularity attack spectrum. To address these challenges, we propose NeuroStat, an end-to-end framework bridging the statistical and semantic gap. NeuroStat captures uncompressed token-level probabilistic logits alongside deep semantic hidden states from a single causal language model backbone. We fuse these heterogeneous signals through Macro-State Residual Modulation, which adaptively calibrates local convolutional features using global uncertainty indicators. Orthogonal and contrastive losses further ensure the learning of complementary representations. Extensive experiments demonstrate that NeuroStat maintains exceptional robustness on MOSAIC compared to the severe degradation of state-of-the-art methods, establishing a new standard for adversarial text detection. Code and the MOSAIC benchmark are available at https://github.com/TencentBAC/NeuroStat.

View source

Similar papers

Preprint Aug 2026

DSPrompt: Dynamic Soft Prompt Defense Against M-RAG Corruption

DSPrompt is proposed, a Dynamic Soft Prompt defense framework that directly reshapes the retriever's embedding semantics, without modifying the retrieval pipeline, and is consistently outperforming existing defense baselines at a fraction of their computational cost.

Chang Liu, Y. Lai, Ming-Yue Cui et al. · 0 citations
Conference Aug 2026

Semantic Consistency Drift Monitoring for Training-Free Adversarial Prompt Injection Detection in Agentic LLM Pipelines

Large language model (LLM) agents that autonomously retrieve external content and execute multi-step action plans are increasingly deployed in enterprise and safetycritical settings. This architecture exposes a critical attack surface: adversarial content embedded within retrieved documents can silently redirect agent...

Sanz Wadibhasme, Janvi Abhyankar, Vanshika Tikale et al. · 0 citations
Review Sep 2026

A comprehensive survey of deepfake generation and detection: techniques, trends, and challenges

This paper presents a comprehensive survey of the deepfake ecosystem, offering a structured taxonomy of both generation paradigms and counter-forensic detection mechanisms, and critically examine state-of-the-art synthesis methodologies.

Shobhit Tyagi, Naveen Chauhan, Akshit Raj Patel et al. · 0 citations
Conference Aug 2026

SCD-Net: A Deep Semantic Contrastive Defense Network Against Prompt Injection in Power Grid LLMs

The integration of Large Language Models (LLMs) into power grid Supervisory Control and Data Acquisition (SCADA) systems introduces unprecedented operational efficiencies but exposes critical infrastructure to stealthy prompt injection attacks. Conventional defenses, such as statistical gateways and general-domain perp...

Qiu-Cheng Ban, Yun Fu, Gang Cao et al. · 0 citations
Conference Open access Sep 2026

Understanding and Exploiting Phase Sensitivity for Attacking Large Vision–Language Models

This paper proposes a novel LVLM attack method, called BadPhase with further backdoor designs, to implant adversarial phase as triggers into any image inputs via data poisoning so as to control the LVLMs’ predictions and finds that LVLMs are sensitive to the phase-aware image structure.

Dai-Zong Liu, Junhao Dong, Xiang Fang et al. · 0 citations
Preprint Open access Aug 2026

Explainability by Design: Structured Kolmogorov-Arnold Networks over Probabilistic Attributes for Speech Deepfake Source Tracing

Modern speech synthesizers can produce highly realistic speech, making source tracing (i.e. identifying the generator behind a spoofed utterance) increasingly important for forensics, online content provenance, and platform accountability. Building on our prior work on transparent probabilistic attributes, which repres...

H. H. Pham, Manasi Chhibber, Tomi H. Kinnunen · 0 citations

Related blog posts

MIT News · Artificial Intelligence Oct 15, 2026

AI model decodes the language cells use to communicate

A new computational approach reveals how cells communicate to assemble into tissues. This could accelerate stem cell engineering, improve disease models, and inform therapies.

Microsoft Research Blog Oct 15, 2026

Proof-based general-purpose computing with Magnetar

Zero-knowledge proofs can verify computing results without rerunning workloads or exposing sensitive data. Magnetar helps bring them into the mainstream with support for standard programming languages, major speed gains, and quantum-resistant security. The post Proof-based general-purpose computing with Magnetar appeared first on Microsoft Research.

MIT News · Artificial Intelligence Sep 24, 2026

Estimating suicide risk from text

A new language-processing tool could help identify the highest-risk individuals from natural language, enabling swifter interventions.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.