USENIX Security2018Top-tier venue
A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation
Rakshith Shetty, Bernt Schiele, Mario Fritz
Abstract
Text-based analysis methods enable an adversary to reveal privacy relevant author attributes such as gender, age and can identify the text's author. Such methods can compromise the privacy of an anonymous author even when the author tries to remove privacy sensitive content. In this paper, we propose an automatic method, called Adversarial Author Attribute Anonymity Neural Translation (A 4 NT), to combat such text-based adversaries. Unlike prior works on obfuscation, we propose a system that is fully automatic and learns to perform obfuscation entirely from data. This allows us to easily apply the A 4 NT system to obfuscate different author attributes. We propose a sequence-to-sequence language model, inspired by machine translation, and an adversarial training framework to design a system which learns to transform the input text to obfuscate author attributes without paired data. We also propose and evaluate techniques to impose constraints on our A 4 NT to preserve the semantics of the input text. A 4 NT learns to make minimal changes to the input to successfully fool author attribute classifiers, while preserving the meaning of the input text. Our experiments on two datasets and three settings show that the proposed method is effective in fooling the author attribute classifiers and thus improves the anonymity of authors.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 3b648ee9-d444-45b6-b288-f4c00af2c2eeCited by top-tier papers19
- Privacy Risks of General-Purpose Language ModelsXudong Pan, Mi Zhang, Shouling Ji, Min YangS&P 2020 · 291 citations
- Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data HidingSahar Abdelnabi, Mario FritzS&P 2021 · 210 citations
- Information Leakage in Embedding ModelsCongzheng Song, Ananth RaghunathanCCS 2020 · 200 citations
- Realtime Robust Malicious Traffic Detection via Frequency Domain AnalysisChuanpu Fu, Qi Li, Meng Shen, Ke XuCCS 2021 · 194 citations
- DP-VAE: Human-Readable Text Anonymization for Online Reviews with Differentially Private Variational AutoencodersBenjamin Weggenmann, Valentin Rublack, Michael Andrejczuk, Justus Mattern et al.WWW 2022 · 55 citations
Related papers
- Adversarial Authorship Attribution for DeobfuscationWanyue Zhai, Jonathan Rusert, Zubair Shafiq, Padmini SrinivasanACL 2022 · 7 citations
- A Girl Has A Name: Detecting Authorship ObfuscationAsad Mahmood, Zubair Shafiq, Padmini SrinivasanACL 2020 · 1 citation
- ALISON: Fast and Effective Stylometric Authorship ObfuscationEric Xing, Saranya Venkatraman, Thai Le, Dongwon LeeAAAI 2024 · 7 citations
- Style Pooling: Automatic Text Style Obfuscation for Improved Classification FairnessFatemehsadat Mireshghallah, Taylor Berg-KirkpatrickEMNLP 2021 · 6 citations
- Language Models are Advanced AnonymizersRobin Staab, Mark Vero, Mislav Balunovic, Martin T. VechevICLR 2025
