With Internet users constantly leaving a trail of text, whether through blogs, emails, or social media posts, the ability to write and protest anonymously is being eroded because artificial intelligence, when given a sample of previous work, can match text with its author out of hundreds of possible candidates. Existing approaches to authorship anonymization, also known as authorship obfuscation, often focus on protecting binary demographic attributes rather than identity as a whole. Even those that do focus on obfuscating identity require manual feedback, lose the coherence of the original sentence, or only perform well given a limited subset of authors. In this paper, we develop a new approach to authorship anonymization by constructing a generative adversarial network that protects identity and optimizes for three different losses corresponding to anonymity, fluency, and content preservation. Our fully automatic method achieves comparable results to other methods in terms of content preservation and fluency, but greatly outperforms baselines in regards to anonymization. Moreover, our approach is able to generalize well to an open-set context and anonymize sentences from authors it has not encountered before.
翻译:互联网用户不断留下文字线索,无论是通过博客、电子邮件还是社交媒体文章,匿名写作和抗议的能力正在受到侵蚀,因为人工智能,如果提供以前工作的样本,可以将文字与成百上千的可能候选人的作者匹配起来。现有的匿名写作方法,又称作者困惑,往往侧重于保护二元人口特征,而不是整个身份。即使那些关注模糊身份的人也需要人工反馈,失去原句的一致性,或者只对有限的作者群体很好地发挥作用。在本文中,我们制定了一种新的写作匿名拼写方法,建立一个基因对抗网络,保护身份,并优化与匿名、流畅和内容保护有关的三种不同的损失。我们完全自动的方法在内容保护和流畅方面与其他方法取得类似的结果,但在匿名方面大大超出基线。此外,我们的方法能够概括开阔的背景,并能够将作者的句子化。