Search papers, labs, and topics across Lattice.
This paper explores the effectiveness of adversarial tactics in anonymizing text against stylometric systems, drawing an analogy from Greek mythology where Hermes defeats the multi-eyed giant Argus through obfuscation. The authors conduct an ablation study of their method, $\textit{TraceTarnish}$, which includes four modules: Translation, Obfuscation, Imitation, and Injection. The key finding reveals that the Injection module, utilizing zero-width Unicode characters, homoglyphs, and intentional misspellings, is the most effective strategy for confounding surveillance and preserving authorship privacy.
Inserting zero-width characters and intentional misspellings can effectively neutralize advanced stylometric systems, safeguarding authorship privacy against pervasive surveillance.
What did it take for Hermes, the devout messenger of the Olympian gods, to slay Argus Panoptes, the multi-eyed giant of Greek myth? As the perfect guardian, Panoptes'legion of ever-watchful eyes proved difficult -- but not impossible -- to defeat. The centerpiece of Hermes'strategy was obfuscation and sabotage. Posing as a shepherd, Hermes sealed each of Panoptes'eyes -- eyes that would otherwise have alerted the fearsome giant to Hermes'plot -- and vanquished him. The moral of the story: when a challenger must surmount a formidable foe -- one far greater in stature and vastly more equipped -- crafty maneuvers are not merely advisable but indispensable for victory. In this work, the"challenger"is a collective leveraging adversarial tactics to overcome the"multi-eyed giant"of stylometric systems and surveillance apparatuses. To successfully claw back the privacy siphoned by the multi-eyed giant, the challenger must carefully evaluate their plan of attack, $\textit{TraceTarnish}$, and determine what does and does not work to anonymize the authorship of text. To that end, we conduct an ablation study of $\textit{TraceTarnish}$ to better understand which module -- Translation, Obfuscation, Imitation, or Injection -- best confounds a stylometric system. Our results indicate that the most effective approach was Injection, meaning that inserting zero-width Unicode characters, homoglyphs, and intentional misspellings neutralizes the indefatigable eyes long enough to claim the head of the all-seeing giant.
