Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Adversarial stylometry
open-in-new
<h2 id="history">History</h2> <p>Rao & Rohatgi (2000), an early work in adversarial stylometry,<a class="footnote-ref" id="fnref:1" href="#fn:1"><sup>1</sup></a> identified machine translation as a possibility, but noted that the quality of translators available at the time presented severe challenges.<a class="footnote-ref" id="fnref:2" href="#fn:2"><sup>2</sup></a> Kacmarcik & Gamon (2006) is another early work. Brennan, Afroz & Greenstadt (2012) performed the first evaluation of adversarial stylometric methods on actual texts.<a class="footnote-ref" id="fnref:3" href="#fn:3"><sup>3</sup></a> </p><p>Brennan & Greenstadt (2009) introduced the first corpus of adversarially authored texts specifically for evaluating stylometric methods;<a class="footnote-ref" id="fnref:4" href="#fn:4"><sup>4</sup></a> other corpora include the <a href="/facts/International_Imitation_Hemingway_Competition/lflU37DE">International Imitation Hemingway Competition</a>, the <a href="/facts/Faux_Faulkner_contest/CCFcy8Ev">Faux Faulkner contest</a>, and the hoax blog <i><a href="/facts/A_Gay_Girl_in_Damascus/onab8lGX">A Gay Girl in Damascus</a></i>.<a class="footnote-ref" id="fnref:5" href="#fn:5"><sup>5</sup></a> </p> <h2 id="motivations">Motivations</h2> <p>Rao & Rohatgi (2000) suggest that short, unattributed documents (i.e., <a href="/facts/Anonymous_post/GjcWqKc7">anonymous posts</a>) are not at risk of stylometric identification, but <a href="/facts/Pseudonymous/A5EjmWxQ">pseudonymous</a> authors who have not practiced adversarial stylometry in producing corpuses of thousands of words may be vulnerable.<a class="footnote-ref" id="fnref:6" href="#fn:6"><sup>6</sup></a> Narayanan et al. (2012) attempted large-scale deanonymisation of 100,000 blog authors with mixed results: the identifications were significantly better than chance, but only accurately matched the blog and author a fifth of the time;<a class="footnote-ref" id="fnref:7" href="#fn:7"><sup>7</sup></a> identification improved with the number of posts written by the author in the corpus.<a class="footnote-ref" id="fnref:8" href="#fn:8"><sup>8</sup></a> Even if an author is not identified, some of their characteristics may still be deduced stylometrically,<a class="footnote-ref" id="fnref:9" href="#fn:9"><sup>9</sup></a> or stylometry may narrow the anonymity set of potential authors sufficiently for other information to complete the identification.<a class="footnote-ref" id="fnref:10" href="#fn:10"><sup>10</sup></a> Detecting author characteristics (e.g., gender or age) is often simpler than identifying an author from a large, possibly open, set of candidates.<a class="footnote-ref" id="fnref:11" href="#fn:11"><sup>11</sup></a> </p><p>Modern <a href="/facts/Machine_learning/e0w0XJTu">machine learning</a> techniques offer powerful tools for identification;<a class="footnote-ref" id="fnref:12" href="#fn:12"><sup>12</sup></a> further development of corpora and computational stylometric techniques are likely to raise further privacy issues.<a class="footnote-ref" id="fnref:13" href="#fn:13"><sup>13</sup></a> Gröndahl & Asokan (2020a) say that the general validity of the hypothesis underlying stylometry—that authors have invariant, content-independent 'style fingerprints'—is uncertain, but "the deanonymisation attack is a real privacy concern".<a class="footnote-ref" id="fnref:14" href="#fn:14"><sup>14</sup></a> </p><p>Those interested in practicing adversarial stylometry and stylistic deception include <a href="/facts/Whistleblowers/Ah5QHEW1">whistleblowers</a> avoiding retribution;<a class="footnote-ref" id="fnref:15" href="#fn:15"><sup>15</sup></a> journalists and activists;<a class="footnote-ref" id="fnref:16" href="#fn:16"><sup>16</sup></a> perpetrators of <a href="/facts/Fraud/VyU68aBy">frauds</a> and <a href="/facts/Hoax/AsSvg6Tp">hoaxes</a>;<a class="footnote-ref" id="fnref:17" href="#fn:17"><sup>17</sup></a> authors of <a href="/facts/Fake_reviews/EE9jng9o">fake reviews</a>;<a class="footnote-ref" id="fnref:18" href="#fn:18"><sup>18</sup></a> <a href="/facts/Literary_forgery/cx7e6xqE">literary forgers</a>;<a class="footnote-ref" id="fnref:19" href="#fn:19"><sup>19</sup></a> criminals disguising their identity from investigators;<a class="footnote-ref" id="fnref:20" href="#fn:20"><sup>20</sup></a> and, generally, anyone with a desire for <a href="/facts/Anonymity/HUJJCdv1">anonymity</a> or pseudonymity.<a class="footnote-ref" id="fnref:21" href="#fn:21"><sup>21</sup></a> Authors, or agents acting on behalf of authors, may also attempt to remove stylistic clues to author characteristics (e.g., race or gender) so that knowledge of those characteristics cannot be used for discrimination (e.g., through <a href="/facts/Algorithmic_bias/vHaHsIdV">algorithmic bias</a>).<a class="footnote-ref" id="fnref:22" href="#fn:22"><sup>22</sup></a><a class="footnote-ref" id="fnref:23" href="#fn:23"><sup>23</sup></a> Another possible use for adversarial stylometry is in disguising <a href="/facts/Text_generation/qudtLU6Y">automatically generated text</a> as human-authored.<a class="footnote-ref" id="fnref:24" href="#fn:24"><sup>24</sup></a> </p> <h2 id="methods">Methods</h2> <p>With imitation, the author attempts to mislead stylometry by matching their style to another author's.<a class="footnote-ref" id="fnref:25" href="#fn:25"><sup>25</sup></a> An incomplete imitation, where some of the true author's unique characteristics appear alongside the imitated author's, can be a detectable signal for the use of adversarial stylometry.<a class="footnote-ref" id="fnref:26" href="#fn:26"><sup>26</sup></a> Imitation can be performed automatically with <a href="/facts/Style_transfer/kDD1jdfC">style transfer</a> systems, though this typically requires a large corpus in the target style for the system to learn from.<a class="footnote-ref" id="fnref:27" href="#fn:27"><sup>27</sup></a> </p><p>Another approach is translation, which employs <a href="/facts/Machine_translation/DGF3NwuI">machine translation</a> of a source text to eliminate characteristic style, often through multiple translators in sequence to produce a <a href="/facts/Round-trip_translation/hNMf3YKf">round-trip translation</a>. Such chained translation can lead to texts being significantly altered, even to the point of incomprehensibility; improved translation tools reduce this risk. More simply-structured texts can be easier to machine translate without losing the original meaning.<a class="footnote-ref" id="fnref:28" href="#fn:28"><sup>28</sup></a> Machine translation blurs into direct stylistic imitation or obfuscation achieved through automated style transfer, which can be viewed as a "translation" with the same language as input and output.<a class="footnote-ref" id="fnref:29" href="#fn:29"><sup>29</sup></a><a class="footnote-ref" id="fnref:30" href="#fn:30"><sup>30</sup></a> With low-quality translation tools, an author can be required to manually correct major translation errors while avoiding the hazard of re-introducing stylistic characteristics.<a class="footnote-ref" id="fnref:31" href="#fn:31"><sup>31</sup></a> Wang, Juola & Riddell (2022) found that gross errors introduced by <a href="/facts/Google_Translate/AR0cRb9n">Google Translate</a> were rare, but more common with several intermediate translations—however, occasional simple or short sentences and misspellings in the source text appeared verbatim in the output, potentially providing an identifying signal.<a class="footnote-ref" id="fnref:32" href="#fn:32"><sup>32</sup></a> Chain translation can leave characteristic traces of its application in a document, which may allow reconstruction of the intermediate languages used and the number of translation steps performed.<a class="footnote-ref" id="fnref:33" href="#fn:33"><sup>33</sup></a> </p><p>Obfuscation involves deliberately changing the style of a text to reduce its similarity to other texts by some metric; this may be performed at the time of writing by conscious modification, or as part of a revision process with feedback from the metric being targeted as an input to decide when the text has been sufficiently obfuscated. In contrast to translation, complex texts can offer more opportunities for effective obfuscation without altering meaning,<a class="footnote-ref" id="fnref:34" href="#fn:34"><sup>34</sup></a> and likewise genres with more permissible variation allow more obfuscation.<a class="footnote-ref" id="fnref:35" href="#fn:35"><sup>35</sup></a> However, longer texts are harder to thoroughly obfuscate.<a class="footnote-ref" id="fnref:36" href="#fn:36"><sup>36</sup></a> Obfuscation can blend into imitation if the author develops a novel target style, distinct from their original style.<a class="footnote-ref" id="fnref:37" href="#fn:37"><sup>37</sup></a> With respect to masking author characteristics, obfuscation may aim to achieve a union (adding signals for imitated characteristics) or an intersection (removing signals and normalising) of other authors' styles.<a class="footnote-ref" id="fnref:38" href="#fn:38"><sup>38</sup></a> Avoiding the author's own idiosyncrasies and producing a "normalised" text is a critical obfuscatory step: an author may have a unique tendency to misspell certain words, use particular variants, or to format a document in a characteristic way.<a class="footnote-ref" id="fnref:39" href="#fn:39"><sup>39</sup></a><a class="footnote-ref" id="fnref:40" href="#fn:40"><sup>40</sup></a> Stylometric signals vary in how simply they can be adversarially masked; an author may easily change their vocabulary by conscious choice, but altering the pattern of grammar or the <a href="/facts/Letter_frequency/IyvrB9eT">letter frequency</a> in their text may be harder to achieve, though Juola & Vescovi (2011) report that imitation typically succeeds at masking more characteristics than obfuscation.<a class="footnote-ref" id="fnref:41" href="#fn:41"><sup>41</sup></a> Automated obfuscation may require large amounts of training data written by the author.<a class="footnote-ref" id="fnref:42" href="#fn:42"><sup>42</sup></a> </p><p>Concerning automated implementations of adversarial stylometry, two possible implementations are <a href="/facts/Rule-based_system/xmlMNr7j">rule-based systems</a> for paraphrasing; and encoder–decoder architectures, where the text passes through an intermediate format that is (intended to be) style-neutral.<a class="footnote-ref" id="fnref:43" href="#fn:43"><sup>43</sup></a> Another division in automated methods is whether there is feedback from an identification system or not.<a class="footnote-ref" id="fnref:44" href="#fn:44"><sup>44</sup></a> With such feedback, finding paraphrases for author masking has been characterised as a <a href="/facts/Heuristic_(computer_science)/PM2qkoa2">heuristic</a> <a href="/facts/Search_problem/eWnSpkAR">search problem</a>, exploring textual variants until the result is stylistically sufficiently far (in the case of obfuscation) or near (in the case of imitation), which then constitutes an adversarial example for that identification system.<a class="footnote-ref" id="fnref:45" href="#fn:45"><sup>45</sup></a><a class="footnote-ref" id="fnref:46" href="#fn:46"><sup>46</sup></a> </p> <h2 id="evaluation">Evaluation</h2> <p>How to best mask stylometric characteristics in practice, and what tasks to perform manually, what with tool assistance, and what fully automatically, is an open field of research, especially in short documents with limited potential variability.<a class="footnote-ref" id="fnref:47" href="#fn:47"><sup>47</sup></a><a class="footnote-ref" id="fnref:48" href="#fn:48"><sup>48</sup></a> Manual adversarial stylometry can be preferred or even required if the author does not trust available computers with the task (as may be the case for a whistleblower, for example).<a class="footnote-ref" id="fnref:49" href="#fn:49"><sup>49</sup></a> Software tools require <a href="/facts/Software_maintenance/Uv39zQb0">maintenance</a>; Wang, Juola & Riddell (2022) report that there is no maintained obfuscatory software suitable for general use.<a class="footnote-ref" id="fnref:50" href="#fn:50"><sup>50</sup></a> Zhai et al. (2022) identify DS-PAN (Castro-Castro, Ortega Bueno & Muñoz 2017) and Mutant-X (Mahmood et al. 2019) as the 2022 state of the art in automated obfuscation.<a class="footnote-ref" id="fnref:51" href="#fn:51"><sup>51</sup></a> Manual stylistic modulation is a significant effort, with poor <a href="/facts/Scalability/jh7JomPa">scalability</a> properties; tool assistance can reduce the burden to varying degrees.<a class="footnote-ref" id="fnref:52" href="#fn:52"><sup>52</sup></a> Deterministic automated methods can lose effectiveness against a classifier trained adversarially, where output from the style transfer program is used in the classifier's training set.<a class="footnote-ref" id="fnref:53" href="#fn:53"><sup>53</sup></a> </p><p>Potthast, Hagen & Stein (2016) give three criteria for use in evaluation of adversarial stylometry methods: <i>safety</i>, meaning that stylistic characteristics are reliably eliminated; <i>soundness</i>, meaning that the semantic content of the text is not unacceptably altered; and <i>sensible</i>, meaning that the output is "well-formed and inconspicuous". Compromising any too deeply is typically an unacceptable result, and the three trade off against each other in practice.<a class="footnote-ref" id="fnref:54" href="#fn:54"><sup>54</sup></a> Potthast, Hagen & Stein (2016) find that automatically evaluating sensibility, and specifically whether output is acceptably grammatical and well-formed, is difficult;<a class="footnote-ref" id="fnref:55" href="#fn:55"><sup>55</sup></a> automated evaluation of soundness is somewhat more promising, but manual review is the best method.<a class="footnote-ref" id="fnref:56" href="#fn:56"><sup>56</sup></a> </p><p>Despite safety being an important property of an adversarial stylometry method, it can still be usefully traded away if the conceded stylometric identification potential is otherwise possible by non-stylometric analysis—for example, an author discussing their own upbringing in Britain is unlikely to care if stylometry can reveal that their text is typical of <a href="/facts/British_English/ymJR5Rnd">British English</a>.<a class="footnote-ref" id="fnref:57" href="#fn:57"><sup>57</sup></a><a class="footnote-ref" id="fnref:58" href="#fn:58"><sup>58</sup></a> </p><p>Evaluating the safety of different approaches is complicated by how identification-resistance fundamentally depends on the methods of identification under consideration.<a class="footnote-ref" id="fnref:59" href="#fn:59"><sup>59</sup></a> The property of being resilient to unknown analyses is called <i>transferability</i>.<a class="footnote-ref" id="fnref:60" href="#fn:60"><sup>60</sup></a> Gröndahl & Asokan (2020b) identify four different <a href="/facts/Threat_model/WhveDvPP">threat models</a> for authors, varying with their knowledge of how their text will be analysed and what <a href="/facts/Training_data/V3mMQb2G">training data</a> will be used: <i>query access</i>, with the weakest analyst and the strongest author who knows both the methods of analysis and the training data; <i>architecture access</i>, where the author knows the analysis methods but not the training data; <i>data access</i>, where the author knows the training data but not the analysis methods; and <i>surrogate access</i>, with the weakest author and the strongest analyst, where the author does not know the methods of analysis nor the training data.<a class="footnote-ref" id="fnref:61" href="#fn:61"><sup>61</sup></a> Further, when an author chooses a method, they must rely on their threat model and trust that it is valid, and that unknown analyses able to detect remaining stylistic signals cannot or will not be performed, or that the masking successfully transfers;<a class="footnote-ref" id="fnref:62" href="#fn:62"><sup>62</sup></a> a stylometrist with knowledge of how the author attempted to mask their style, however, may be able to exploit some weakness in the method and render it unsafe.<a class="footnote-ref" id="fnref:63" href="#fn:63"><sup>63</sup></a> Much of the research into automated methods has assumed that the author has query access, which may not generalise to other settings.<a class="footnote-ref" id="fnref:64" href="#fn:64"><sup>64</sup></a> Masking methods that internally use an <a href="/facts/Ensemble_learning/GvFsd3Qc">ensemble</a> of different analyses as a model for its adversary may transfer better against unseen analyses.<a class="footnote-ref" id="fnref:65" href="#fn:65"><sup>65</sup></a> </p><p>A thorough soundness loss defeats the purpose of communication, though some degree of meaning change may be tolerable if the core message is preserved; requiring only <a href="/facts/Textual_entailment/6c93bq9J">textual entailment</a> or allowing <a href="/facts/Automatic_summarisation/yTQYaEIe">automatic summarisation</a> are other options to lose some meaning in a possibly-tolerable way.<a class="footnote-ref" id="fnref:66" href="#fn:66"><sup>66</sup></a> Rewriting an input text to defeat stylometry, as opposed to consciously removing stylistic characteristics during composition, poses challenges in retaining textual meaning.<a class="footnote-ref" id="fnref:67" href="#fn:67"><sup>67</sup></a> Gröndahl & Asokan (2020a) assess the problem of unsoundness as "the most important challenge" for research into fully automatic approaches.<a class="footnote-ref" id="fnref:68" href="#fn:68"><sup>68</sup></a> </p><p>For sensibility, if a text is so ungrammatical as to be incomprehensible or so ill-formed that it cannot fit in to its genre then the method has failed, but compromises short of that point may be useful.<a class="footnote-ref" id="fnref:69" href="#fn:69"><sup>69</sup></a> If inconspicuity is partially lost, then there is the possibility that more expensive and less scalable analyses will be performed (e.g., consulting a forensic linguist) to confirm suspicions or gather further evidence.<a class="footnote-ref" id="fnref:70" href="#fn:70"><sup>70</sup></a> The impact of a total inconspicuity failure varies depending on the motivation for performing adversarial stylometry: for someone simply attempting to stay anonymous (e.g., a whistleblower), detection may not be an issue; for a literary forger, however, detection would be disastrous.<a class="footnote-ref" id="fnref:71" href="#fn:71"><sup>71</sup></a> Adversarial stylometry can leave evidence of its practice, which is an inconspicuity failure.<a class="footnote-ref" id="fnref:72" href="#fn:72"><sup>72</sup></a><a class="footnote-ref" id="fnref:73" href="#fn:73"><sup>73</sup></a> In the Brennan–Greenstadt corpus, the texts have been found to share a common "style" of their own.<a class="footnote-ref" id="fnref:74" href="#fn:74"><sup>74</sup></a> However, Gröndahl & Asokan (2020a) assess existing evidence as insufficient to prove that adversarial stylometry is always detectable, with only limited methods having been studied.<a class="footnote-ref" id="fnref:75" href="#fn:75"><sup>75</sup></a> Improving the smoothness of the output text may reduce the detectability of automated tools.<a class="footnote-ref" id="fnref:76" href="#fn:76"><sup>76</sup></a> The overall detectability of adversarial authorship has not been thoroughly studied; if the methods available to be used by the author are unknown to the stylometrist, it may be impossible.<a class="footnote-ref" id="fnref:77" href="#fn:77"><sup>77</sup></a> </p><p>The problems of author identification and verification in an adversarial setting are greatly different from recognising naïve or cooperative authors.<a class="footnote-ref" id="fnref:78" href="#fn:78"><sup>78</sup></a> Deliberate attempts to mask authorship are described by Juola & Vescovi (2011) as a "problem for the current state of stylometric art",<a class="footnote-ref" id="fnref:79" href="#fn:79"><sup>79</sup></a> and Brennan, Afroz & Greenstadt (2012) state that, despite stylometry's high performance in identifying non-adversarial authors, manual application of adversarial methods render it unreliable.<a class="footnote-ref" id="fnref:80" href="#fn:80"><sup>80</sup></a> </p><p>Kacmarcik & Gamon (2006) observe that low-dimensional stylometric models which operate on small numbers of features are less resistant to adversarial stylometry.<a class="footnote-ref" id="fnref:81" href="#fn:81"><sup>81</sup></a> Research has found that authors vary in how well they are able to modulate their style, with some able to successfully perform the task even without training.<a class="footnote-ref" id="fnref:82" href="#fn:82"><sup>82</sup></a> Wang, Juola & Riddell (2022), a replication and reproduction of Brennan, Afroz & Greenstadt (2012), found that all three of imitation, translation and obfuscation meaningfully reduced the effectiveness of authorship attribution, with manual obfuscation being somewhat more effective than manual imitation or translation, which performed similarly to each other; the original study found that imitation was superior.<a class="footnote-ref" id="fnref:83" href="#fn:83"><sup>83</sup></a> Potthast, Hagen & Stein (2016) reported that even simple automated methods of adversarial stylometry caused major difficulties for state-of-the-art authorship identification systems, though at significant soundness and sensibility cost.<a class="footnote-ref" id="fnref:84" href="#fn:84"><sup>84</sup></a> Adversarially-aware identification systems can perform much better against adversarial stylometry provided that they know which potential obfuscation methods were used, even if the identifier makes mistakes in analysing which anonymisation method was used.<a class="footnote-ref" id="fnref:85" href="#fn:85"><sup>85</sup></a> </p> <h2 id="see-also">See also</h2> <ul><li><a href="/facts/Adversarial_machine_learning/4An4fgUc">Adversarial machine learning</a></li> <li><a href="/facts/Author_profiling/Ku76FE2T">Author profiling</a></li> <li><a href="/facts/De-identification/etokaj8q">De-identification</a></li> <li><a href="/facts/Digital_watermarking/73WXq5PK">Digital watermarking</a></li> <li><a href="/facts/Online_identity_management/Tfaaz7CE">Online identity management</a></li> <li><a href="/facts/Operational_security/j5BkXkog">Operational security</a></li> <li><a href="/facts/Steganography/RGLdKYcE">Steganography</a></li></ul> <h2 id="bibliography">Bibliography</h2> <ul><li>Adelani, David; Zhang, Miaoran; Shen, Xiaoyu; Davody, Ali; Kleinbauer, Thomas; Klakow, Dietrich (2021). "Preventing Author Profiling through Zero-Shot Multilingual Back-Translation". <i>Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing</i>. pp. 8687–8695. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2109.09133">2109.09133</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2F2021.emnlp-main.684">10.18653/v1/2021.emnlp-main.684</a>.</li> <li>Afroz, Sadia; Brennan, Michael; Greenstadt, Rachel (2012). "Detecting Hoaxes, Frauds, and Deception in Writing Style Online". <i>2012 IEEE Symposium on Security and Privacy</i>. pp. 461–475. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1109%2FSP.2012.34">10.1109/SP.2012.34</a>. <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 978-1-4673-1244-8.</li> <li>Almishari, Mishari; Oguz, Ekin; Tsudik, Gene (2014). "Fighting Authorship Linkability with Crowdsourcing". <i>Proceedings of the second edition of the ACM conference on Online social networks - COSN '14</i>. pp. 69–82. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/1405.4918">1405.4918</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1145%2F2660460.2660486">10.1145/2660460.2660486</a>. <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 9781450331982. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:7741036">7741036</a>.</li> <li>Bevendorff, Janek; Potthast, Martin; Hagen, Matthias; Stein, Benno (2019). "Heuristic Authorship Obfuscation". <i>Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics</i>. pp. 1098–1108. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2FP19-1104">10.18653/v1/P19-1104</a>.</li> <li>Brennan, Michael; Afroz, Sadia; Greenstadt, Rachel (2012). <a href="https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf">"Adversarial stylometry: Circumventing Authorship Recognition to Preserve Privacy and Anonymity"</a> (PDF). <i>ACM Transactions on Information and System Security</i>. 15 (3): 1–22. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1145%2F2382448.2382450">10.1145/2382448.2382450</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:16176436">16176436</a>.</li> <li>Brennan, Michael Robert; Greenstadt, Rachel (2009). <a href="https://www.aaai.org/ocs/index.php/IAAI/IAAI09/paper/view/257"><i>Practical Attacks Against Authorship Recognition Techniques</i></a>. Innovative Applications of Artificial Intelligence.</li> <li>Castro-Castro, Daniel; Ortega Bueno, Reynier; Muñoz, Rafael (2017). <a href="https://ceur-ws.org/Vol-1866/paper_170.pdf">"Author Masking by Sentence Transformation—Notebook for PAN at CLEF 2017"</a> (PDF). <i>CLEF 2017 Evaluation Labs and Workshop – Working Notes Papers, 11-14 September, Dublin, Ireland</i>. <a href="/facts/ISSN_(identifier)/DPAflDvU">ISSN</a> <a href="https://search.worldcat.org/issn/1613-0073">1613-0073</a>.</li> <li>Emmery, Chris; Kádár, Ákos; Chrupała, Grzegorz (2021). "Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling". <i>Proceedings of the 16th Conference of the European Chapter of the Association for Computational Linguistics: Main Volume</i>. pp. 2388–2402. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2101.11310">2101.11310</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2F2021.eacl-main.203">10.18653/v1/2021.eacl-main.203</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:231719026">231719026</a>.</li> <li>Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". <i><a href="/facts/ACM_Computing_Surveys/18Itftvp">ACM Computing Surveys</a></i>. 52 (3): 1–36. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/1902.08939">1902.08939</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1145%2F3310331">10.1145/3310331</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:67856540">67856540</a>.</li> <li>Gröndahl, Tommi; Asokan, N. (2020b). <a href="https://doi.org/10.2478%2Fpopets-2020-0068">"Effective writing style imitation via combinatorial paraphrasing"</a>. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/1905.13464">1905.13464</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.2478%2Fpopets-2020-0068">10.2478/popets-2020-0068</a>. {{cite journal}}: Cite journal requires |journal= (help)</li> <li>Haroon, Muhammad; Zaffar, Fareed; Srinivasan, Padmini; Shafiq, Zubair (2021). "Avengers Ensemble! Improving Transferability of Authorship Obfuscation". <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2109.07028">2109.07028</a>. {{cite journal}}: Cite journal requires |journal= (help)</li> <li><a href="/facts/Patrick_Juola/ug6fdrHC">Juola, Patrick</a>; Vescovi, Darren (2011). "Analyzing Stylometric Approaches to Author Obfuscation". <i>Advances in Digital Forensics VII</i>. IFIP Advances in Information and Communication Technology. Vol. 361. pp. 115–125. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1007%2F978-3-642-24212-0_9">10.1007/978-3-642-24212-0_9</a>. <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 978-3-642-24211-3.</li> <li><a href="/facts/Patrick_Juola/ug6fdrHC">Juola, Patrick</a> (April 2012). <a href="https://aclanthology.org/W12-0414/">"Detecting Stylistic Deception"</a>. <i>Proceedings of the Workshop on Computational Approaches to Deception Detection</i>. pp. 91–96.</li> <li>Kacmarcik, Gary; Gamon, Michael (17 July 2006). <a href="https://aclanthology.org/P06-2058/">"Obfuscating document stylometry to preserve author anonymity"</a>. <i>Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions</i>. pp. 444–451.</li> <li>Mahmood, Asad; Ahmad, Faizan; Shafiq, Zubair; Srinivasan, Padmini; Zaffar, Fareed (2019). <a href="https://doi.org/10.2478%2Fpopets-2019-0058">"A Girl Has No Name: Automated Authorship Obfuscation using Mutant-X"</a>. <i>Proceedings on Privacy Enhancing Technologies</i>. 2019 (4): 54–71. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.2478%2Fpopets-2019-0058">10.2478/popets-2019-0058</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:197621394">197621394</a>.</li> <li>Mahmood, Asad; Shafiq, Zubair; Srinivasan, Padmini (2020). "A Girl Has a Name: Detecting Authorship Obfuscation". <i>Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics</i>. pp. 2235–2245. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2005.00702">2005.00702</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2F2020.acl-main.203">10.18653/v1/2020.acl-main.203</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:218486757">218486757</a>.</li> <li>McDonald, Andrew W. E.; Afroz, Sadia; Caliskan, Aylin; Stolerman, Ariel; Greenstadt, Rachel (2012). <a href="http://www.stolerman.net/papers/anonymouth_pets2012.pdf">"Use Fewer Instances of the Letter "i": Toward Writing Style Anonymization"</a> (PDF). <i>Privacy Enhancing Technologies</i>. <a href="/facts/Lecture_Notes_in_Computer_Science/1UeA77BC">Lecture Notes in Computer Science</a>. Vol. 7384. pp. 299–318. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1007%2F978-3-642-31680-7_16">10.1007/978-3-642-31680-7_16</a>. <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 978-3-642-31679-1. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:15715170">15715170</a>.</li> <li>Mireshghallah, Fatemehsadat; Berg-Kirkpatrick, Taylor (2021). "Style Pooling: Automatic Text Style Obfuscation for Improved Classification Fairness". <i>Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing</i>. pp. 2009–2022. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2109.04624">2109.04624</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2F2021.emnlp-main.152">10.18653/v1/2021.emnlp-main.152</a>.</li> <li>Narayanan, Arvind; Paskov, Hristo; Gong, Neil Zhenqiang; Bethencourt, John; Stefanov, Emil; Shin, Eui Chul Richard; Song, Dawn (2012). "On the Feasibility of Internet-Scale Author Identification". <i>2012 IEEE Symposium on Security and Privacy</i>. pp. 300–314. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1109%2FSP.2012.46">10.1109/SP.2012.46</a>. <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 978-1-4673-1244-8. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:6733582">6733582</a>.</li> <li>Neal, Tempestt; Sundararajan, Kalaivani; Fatima, Aneez; Yan, Yiming; Xiang, Yingfei; Woodard, Damon (2018). "Surveying Stylometry Techniques and Applications". <i><a href="/facts/ACM_Computing_Surveys/18Itftvp">ACM Computing Surveys</a></i>. 50 (6): 1–36. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.1145%2F3132039">10.1145/3132039</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:21360798">21360798</a>.</li> <li>Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). <a href="https://ceur-ws.org/Vol-1609/16090716.pdf"><i>Author Obfuscation: Attacking the State of the Art in Authorship Verification</i></a> (PDF). Conference and Labs of the Evaluation Forum.</li> <li>Rao, Josyula R.; Rohatgi, Pankaj (2000). <a href="https://www.usenix.org/conference/9th-usenix-security-symposium/can-pseudonymity-really-guarantee-privacy"><i>Can Pseudonymity Really Guarantee Privacy?</i></a>. USENIX Security Symposium.</li> <li>Saedi, Chakaveh; Dras, Mark (December 2020). <a href="https://aclanthology.org/2020.starsem-1.19">"Large Scale Author Obfuscation Using Siamese Variational Auto-Encoder: The SiamAO System"</a>. <i>Proceedings of the Ninth Joint Conference on Lexical and Computational Semantics</i>. pp. 179–189.</li> <li>Shetty, Rakshith; Schiele, Bernt; Fritz, Mario (2018). <a href="https://www.usenix.org/conference/usenixsecurity18/presentation/shetty">"A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation"</a>. <i>Proceedings of the 27th USENIX Security Symposium</i>. <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 978-1-939133-04-5.</li> <li>Uchendu, Adaku; Le, Thai; Lee, Dongwon (2022). "Attribution and Obfuscation of Neural Text Authorship: A Data Mining Perspective". <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2210.10488">2210.10488</a>. {{cite journal}}: Cite journal requires |journal= (help)</li> <li>Wang, Haining; <a href="/facts/Patrick_Juola/ug6fdrHC">Juola, Patrick</a>; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2208.07395">2208.07395</a>. {{cite journal}}: Cite journal requires |journal= (help)</li> <li>Xu, Qiongkai; Qu, Lizhen; Xu, Chenchen; Cui, Ran (2019). "Privacy-Aware Text Rewriting". <i>Proceedings of the 12th International Conference on Natural Language Generation</i>. pp. 247–257. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2FW19-8633">10.18653/v1/W19-8633</a>. <a href="/facts/Hdl_(identifier)/rdebSxmC">hdl</a>:<a href="https://hdl.handle.net/1885%2F317479">1885/317479</a>.</li> <li>Zhai, Wanyue; Rusert, Jonathan; Shafiq, Zubair; Srinivasan, Padmini (2022). "A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscation". <i>Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)</i>. pp. 7372–7384. <a href="/facts/ArXiv_(identifier)/H6EtgnBe">arXiv</a>:<a href="https://arxiv.org/abs/2203.11849">2203.11849</a>. <a href="/facts/Doi_(identifier)/muM9Etpq">doi</a>:<a href="https://doi.org/10.18653%2Fv1%2F2022.acl-long.509">10.18653/v1/2022.acl-long.509</a>. <a href="/facts/S2CID_(identifier)/ldJsHa2Y">S2CID</a> <a href="https://api.semanticscholar.org/CorpusID:248780012">248780012</a>.</li></ul> <h2 id="references">References</h2> <ol> <li id="fn:1"><p>Brennan, Afroz & Greenstadt 2012, p. 3-4. - Brennan, Michael; Afroz, Sadia; Greenstadt, Rachel (2012). "Adversarial stylometry: Circumventing Authorship Recognition to Preserve Privacy and Anonymity" (PDF). ACM Transactions on Information and System Security. 15 (3): 1–22. doi:10.1145/2382448.2382450. S2CID 16176436. <a href="https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf" target="_blank">https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li> <li id="fn:2"><p>Kacmarcik & Gamon 2006, p. 445. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li> <li id="fn:3"><p>Brennan, Afroz & Greenstadt 2012, p. 3-4. - Brennan, Michael; Afroz, Sadia; Greenstadt, Rachel (2012). "Adversarial stylometry: Circumventing Authorship Recognition to Preserve Privacy and Anonymity" (PDF). ACM Transactions on Information and System Security. 15 (3): 1–22. doi:10.1145/2382448.2382450. S2CID 16176436. <a href="https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf" target="_blank">https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li> <li id="fn:4"><p>Juola & Vescovi 2011, p. 117. - Juola, Patrick; Vescovi, Darren (2011). "Analyzing Stylometric Approaches to Author Obfuscation". Advances in Digital Forensics VII. IFIP Advances in Information and Communication Technology. Vol. 361. pp. 115–125. doi:10.1007/978-3-642-24212-0_9. ISBN 978-3-642-24211-3. <a href="https://doi.org/10.1007%2F978-3-642-24212-0_9" target="_blank">https://doi.org/10.1007%2F978-3-642-24212-0_9</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li> <li id="fn:5"><p>Afroz, Brennan & Greenstadt 2012, p. 466. - Afroz, Sadia; Brennan, Michael; Greenstadt, Rachel (2012). "Detecting Hoaxes, Frauds, and Deception in Writing Style Online". 2012 IEEE Symposium on Security and Privacy. pp. 461–475. doi:10.1109/SP.2012.34. ISBN 978-1-4673-1244-8. <a href="https://doi.org/10.1109%2FSP.2012.34" target="_blank">https://doi.org/10.1109%2FSP.2012.34</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li> <li id="fn:6"><p>Rao & Rohatgi 2000, 1.3 Contributions. - Rao, Josyula R.; Rohatgi, Pankaj (2000). Can Pseudonymity Really Guarantee Privacy?. USENIX Security Symposium. <a href="https://www.usenix.org/conference/9th-usenix-security-symposium/can-pseudonymity-really-guarantee-privacy" target="_blank">https://www.usenix.org/conference/9th-usenix-security-symposium/can-pseudonymity-really-guarantee-privacy</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li> <li id="fn:7"><p>Gröndahl & Asokan 2020a, p. 19. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></p></li> <li id="fn:8"><p>Narayanan et al. 2012, p. 301. - Narayanan, Arvind; Paskov, Hristo; Gong, Neil Zhenqiang; Bethencourt, John; Stefanov, Emil; Shin, Eui Chul Richard; Song, Dawn (2012). "On the Feasibility of Internet-Scale Author Identification". 2012 IEEE Symposium on Security and Privacy. pp. 300–314. doi:10.1109/SP.2012.46. ISBN 978-1-4673-1244-8. S2CID 6733582. <a href="https://doi.org/10.1109%2FSP.2012.46" target="_blank">https://doi.org/10.1109%2FSP.2012.46</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></p></li> <li id="fn:9"><p>Emmery, Kádár & Chrupała 2021, p. 2388. - Emmery, Chris; Kádár, Ákos; Chrupała, Grzegorz (2021). "Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling". Proceedings of the 16th Conference of the European Chapter of the Association for Computational Linguistics: Main Volume. pp. 2388–2402. arXiv:2101.11310. doi:10.18653/v1/2021.eacl-main.203. S2CID 231719026. <a href="https://arxiv.org/abs/2101.11310" target="_blank">https://arxiv.org/abs/2101.11310</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></p></li> <li id="fn:10"><p>Narayanan et al. 2012, p. 301. - Narayanan, Arvind; Paskov, Hristo; Gong, Neil Zhenqiang; Bethencourt, John; Stefanov, Emil; Shin, Eui Chul Richard; Song, Dawn (2012). "On the Feasibility of Internet-Scale Author Identification". 2012 IEEE Symposium on Security and Privacy. pp. 300–314. doi:10.1109/SP.2012.46. ISBN 978-1-4673-1244-8. S2CID 6733582. <a href="https://doi.org/10.1109%2FSP.2012.46" target="_blank">https://doi.org/10.1109%2FSP.2012.46</a> <a href="#fnref:10" class="footnote-back-ref">↩</a></p></li> <li id="fn:11"><p>Shetty, Schiele & Fritz 2018, 1 Introduction. - Shetty, Rakshith; Schiele, Bernt; Fritz, Mario (2018). "A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation". Proceedings of the 27th USENIX Security Symposium. ISBN 978-1-939133-04-5. <a href="https://www.usenix.org/conference/usenixsecurity18/presentation/shetty" target="_blank">https://www.usenix.org/conference/usenixsecurity18/presentation/shetty</a> <a href="#fnref:11" class="footnote-back-ref">↩</a></p></li> <li id="fn:12"><p>Mahmood et al. 2019, p. 54. - Mahmood, Asad; Ahmad, Faizan; Shafiq, Zubair; Srinivasan, Padmini; Zaffar, Fareed (2019). "A Girl Has No Name: Automated Authorship Obfuscation using Mutant-X". Proceedings on Privacy Enhancing Technologies. 2019 (4): 54–71. doi:10.2478/popets-2019-0058. S2CID 197621394. <a href="https://doi.org/10.2478%2Fpopets-2019-0058" target="_blank">https://doi.org/10.2478%2Fpopets-2019-0058</a> <a href="#fnref:12" class="footnote-back-ref">↩</a></p></li> <li id="fn:13"><p>Gröndahl & Asokan 2020a, p. 28. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:13" class="footnote-back-ref">↩</a></p></li> <li id="fn:14"><p>Gröndahl & Asokan 2020a, p. 3. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:14" class="footnote-back-ref">↩</a></p></li> <li id="fn:15"><p>Kacmarcik & Gamon 2006, p. 444. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:15" class="footnote-back-ref">↩</a></p></li> <li id="fn:16"><p>Mahmood et al. 2019, p. 54. - Mahmood, Asad; Ahmad, Faizan; Shafiq, Zubair; Srinivasan, Padmini; Zaffar, Fareed (2019). "A Girl Has No Name: Automated Authorship Obfuscation using Mutant-X". Proceedings on Privacy Enhancing Technologies. 2019 (4): 54–71. doi:10.2478/popets-2019-0058. S2CID 197621394. <a href="https://doi.org/10.2478%2Fpopets-2019-0058" target="_blank">https://doi.org/10.2478%2Fpopets-2019-0058</a> <a href="#fnref:16" class="footnote-back-ref">↩</a></p></li> <li id="fn:17"><p>Afroz, Brennan & Greenstadt 2012, p. 461. - Afroz, Sadia; Brennan, Michael; Greenstadt, Rachel (2012). "Detecting Hoaxes, Frauds, and Deception in Writing Style Online". 2012 IEEE Symposium on Security and Privacy. pp. 461–475. doi:10.1109/SP.2012.34. ISBN 978-1-4673-1244-8. <a href="https://doi.org/10.1109%2FSP.2012.34" target="_blank">https://doi.org/10.1109%2FSP.2012.34</a> <a href="#fnref:17" class="footnote-back-ref">↩</a></p></li> <li id="fn:18"><p>Gröndahl & Asokan 2020a, p. 4. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:18" class="footnote-back-ref">↩</a></p></li> <li id="fn:19"><p>Potthast, Hagen & Stein 2016, p. 5. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:19" class="footnote-back-ref">↩</a></p></li> <li id="fn:20"><p>Juola & Vescovi 2011, p. 115. - Juola, Patrick; Vescovi, Darren (2011). "Analyzing Stylometric Approaches to Author Obfuscation". Advances in Digital Forensics VII. IFIP Advances in Information and Communication Technology. Vol. 361. pp. 115–125. doi:10.1007/978-3-642-24212-0_9. ISBN 978-3-642-24211-3. <a href="https://doi.org/10.1007%2F978-3-642-24212-0_9" target="_blank">https://doi.org/10.1007%2F978-3-642-24212-0_9</a> <a href="#fnref:20" class="footnote-back-ref">↩</a></p></li> <li id="fn:21"><p>Kacmarcik & Gamon 2006, p. 444. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:21" class="footnote-back-ref">↩</a></p></li> <li id="fn:22"><p>Xu et al. 2019, p. 247. - Xu, Qiongkai; Qu, Lizhen; Xu, Chenchen; Cui, Ran (2019). "Privacy-Aware Text Rewriting". Proceedings of the 12th International Conference on Natural Language Generation. pp. 247–257. doi:10.18653/v1/W19-8633. hdl:1885/317479. <a href="https://doi.org/10.18653%2Fv1%2FW19-8633" target="_blank">https://doi.org/10.18653%2Fv1%2FW19-8633</a> <a href="#fnref:22" class="footnote-back-ref">↩</a></p></li> <li id="fn:23"><p>Mireshghallah & Berg-Kirkpatrick 2021, p. 2009. - Mireshghallah, Fatemehsadat; Berg-Kirkpatrick, Taylor (2021). "Style Pooling: Automatic Text Style Obfuscation for Improved Classification Fairness". Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing. pp. 2009–2022. arXiv:2109.04624. doi:10.18653/v1/2021.emnlp-main.152. <a href="https://arxiv.org/abs/2109.04624" target="_blank">https://arxiv.org/abs/2109.04624</a> <a href="#fnref:23" class="footnote-back-ref">↩</a></p></li> <li id="fn:24"><p>Uchendu, Le & Lee 2022, p. 1. - Uchendu, Adaku; Le, Thai; Lee, Dongwon (2022). "Attribution and Obfuscation of Neural Text Authorship: A Data Mining Perspective". arXiv:2210.10488. <a href="https://arxiv.org/abs/2210.10488" target="_blank">https://arxiv.org/abs/2210.10488</a> <a href="#fnref:24" class="footnote-back-ref">↩</a></p></li> <li id="fn:25"><p>Neal et al. 2018, p. 6. - Neal, Tempestt; Sundararajan, Kalaivani; Fatima, Aneez; Yan, Yiming; Xiang, Yingfei; Woodard, Damon (2018). "Surveying Stylometry Techniques and Applications". ACM Computing Surveys. 50 (6): 1–36. doi:10.1145/3132039. S2CID 21360798. <a href="https://doi.org/10.1145%2F3132039" target="_blank">https://doi.org/10.1145%2F3132039</a> <a href="#fnref:25" class="footnote-back-ref">↩</a></p></li> <li id="fn:26"><p>Kacmarcik & Gamon 2006, p. 446. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:26" class="footnote-back-ref">↩</a></p></li> <li id="fn:27"><p>Wang, Juola & Riddell 2022, p. 2. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:27" class="footnote-back-ref">↩</a></p></li> <li id="fn:28"><p>Neal et al. 2018, p. 6. - Neal, Tempestt; Sundararajan, Kalaivani; Fatima, Aneez; Yan, Yiming; Xiang, Yingfei; Woodard, Damon (2018). "Surveying Stylometry Techniques and Applications". ACM Computing Surveys. 50 (6): 1–36. doi:10.1145/3132039. S2CID 21360798. <a href="https://doi.org/10.1145%2F3132039" target="_blank">https://doi.org/10.1145%2F3132039</a> <a href="#fnref:28" class="footnote-back-ref">↩</a></p></li> <li id="fn:29"><p>Shetty, Schiele & Fritz 2018, 2 Related Work. - Shetty, Rakshith; Schiele, Bernt; Fritz, Mario (2018). "A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation". Proceedings of the 27th USENIX Security Symposium. ISBN 978-1-939133-04-5. <a href="https://www.usenix.org/conference/usenixsecurity18/presentation/shetty" target="_blank">https://www.usenix.org/conference/usenixsecurity18/presentation/shetty</a> <a href="#fnref:29" class="footnote-back-ref">↩</a></p></li> <li id="fn:30"><p>Adelani et al. 2021, p. 8687. - Adelani, David; Zhang, Miaoran; Shen, Xiaoyu; Davody, Ali; Kleinbauer, Thomas; Klakow, Dietrich (2021). "Preventing Author Profiling through Zero-Shot Multilingual Back-Translation". Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing. pp. 8687–8695. arXiv:2109.09133. doi:10.18653/v1/2021.emnlp-main.684. <a href="https://arxiv.org/abs/2109.09133" target="_blank">https://arxiv.org/abs/2109.09133</a> <a href="#fnref:30" class="footnote-back-ref">↩</a></p></li> <li id="fn:31"><p>Kacmarcik & Gamon 2006, p. 445. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:31" class="footnote-back-ref">↩</a></p></li> <li id="fn:32"><p>Wang, Juola & Riddell 2022, p. 8. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:32" class="footnote-back-ref">↩</a></p></li> <li id="fn:33"><p>Wang, Juola & Riddell 2022, p. 2. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:33" class="footnote-back-ref">↩</a></p></li> <li id="fn:34"><p>Neal et al. 2018, p. 6-7. - Neal, Tempestt; Sundararajan, Kalaivani; Fatima, Aneez; Yan, Yiming; Xiang, Yingfei; Woodard, Damon (2018). "Surveying Stylometry Techniques and Applications". ACM Computing Surveys. 50 (6): 1–36. doi:10.1145/3132039. S2CID 21360798. <a href="https://doi.org/10.1145%2F3132039" target="_blank">https://doi.org/10.1145%2F3132039</a> <a href="#fnref:34" class="footnote-back-ref">↩</a></p></li> <li id="fn:35"><p>Neal et al. 2018, p. 26. - Neal, Tempestt; Sundararajan, Kalaivani; Fatima, Aneez; Yan, Yiming; Xiang, Yingfei; Woodard, Damon (2018). "Surveying Stylometry Techniques and Applications". ACM Computing Surveys. 50 (6): 1–36. doi:10.1145/3132039. S2CID 21360798. <a href="https://doi.org/10.1145%2F3132039" target="_blank">https://doi.org/10.1145%2F3132039</a> <a href="#fnref:35" class="footnote-back-ref">↩</a></p></li> <li id="fn:36"><p>Mahmood et al. 2019, p. 55. - Mahmood, Asad; Ahmad, Faizan; Shafiq, Zubair; Srinivasan, Padmini; Zaffar, Fareed (2019). "A Girl Has No Name: Automated Authorship Obfuscation using Mutant-X". Proceedings on Privacy Enhancing Technologies. 2019 (4): 54–71. doi:10.2478/popets-2019-0058. S2CID 197621394. <a href="https://doi.org/10.2478%2Fpopets-2019-0058" target="_blank">https://doi.org/10.2478%2Fpopets-2019-0058</a> <a href="#fnref:36" class="footnote-back-ref">↩</a></p></li> <li id="fn:37"><p>Afroz, Brennan & Greenstadt 2012, p. 471. - Afroz, Sadia; Brennan, Michael; Greenstadt, Rachel (2012). "Detecting Hoaxes, Frauds, and Deception in Writing Style Online". 2012 IEEE Symposium on Security and Privacy. pp. 461–475. doi:10.1109/SP.2012.34. ISBN 978-1-4673-1244-8. <a href="https://doi.org/10.1109%2FSP.2012.34" target="_blank">https://doi.org/10.1109%2FSP.2012.34</a> <a href="#fnref:37" class="footnote-back-ref">↩</a></p></li> <li id="fn:38"><p>Mireshghallah & Berg-Kirkpatrick 2021, p. 2009-2010. - Mireshghallah, Fatemehsadat; Berg-Kirkpatrick, Taylor (2021). "Style Pooling: Automatic Text Style Obfuscation for Improved Classification Fairness". Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing. pp. 2009–2022. arXiv:2109.04624. doi:10.18653/v1/2021.emnlp-main.152. <a href="https://arxiv.org/abs/2109.04624" target="_blank">https://arxiv.org/abs/2109.04624</a> <a href="#fnref:38" class="footnote-back-ref">↩</a></p></li> <li id="fn:39"><p>Kacmarcik & Gamon 2006, p. 445. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:39" class="footnote-back-ref">↩</a></p></li> <li id="fn:40"><p>Rao & Rohatgi 2000, 5 Future Directions. - Rao, Josyula R.; Rohatgi, Pankaj (2000). Can Pseudonymity Really Guarantee Privacy?. USENIX Security Symposium. <a href="https://www.usenix.org/conference/9th-usenix-security-symposium/can-pseudonymity-really-guarantee-privacy" target="_blank">https://www.usenix.org/conference/9th-usenix-security-symposium/can-pseudonymity-really-guarantee-privacy</a> <a href="#fnref:40" class="footnote-back-ref">↩</a></p></li> <li id="fn:41"><p>Juola & Vescovi 2011, p. 121-123. - Juola, Patrick; Vescovi, Darren (2011). "Analyzing Stylometric Approaches to Author Obfuscation". Advances in Digital Forensics VII. IFIP Advances in Information and Communication Technology. Vol. 361. pp. 115–125. doi:10.1007/978-3-642-24212-0_9. ISBN 978-3-642-24211-3. <a href="https://doi.org/10.1007%2F978-3-642-24212-0_9" target="_blank">https://doi.org/10.1007%2F978-3-642-24212-0_9</a> <a href="#fnref:41" class="footnote-back-ref">↩</a></p></li> <li id="fn:42"><p>Mahmood et al. 2019, p. 55. - Mahmood, Asad; Ahmad, Faizan; Shafiq, Zubair; Srinivasan, Padmini; Zaffar, Fareed (2019). "A Girl Has No Name: Automated Authorship Obfuscation using Mutant-X". Proceedings on Privacy Enhancing Technologies. 2019 (4): 54–71. doi:10.2478/popets-2019-0058. S2CID 197621394. <a href="https://doi.org/10.2478%2Fpopets-2019-0058" target="_blank">https://doi.org/10.2478%2Fpopets-2019-0058</a> <a href="#fnref:42" class="footnote-back-ref">↩</a></p></li> <li id="fn:43"><p>Gröndahl & Asokan 2020b, p. 177. - Gröndahl, Tommi; Asokan, N. (2020b). "Effective writing style imitation via combinatorial paraphrasing". arXiv:1905.13464. doi:10.2478/popets-2020-0068. <a href="https://doi.org/10.2478%2Fpopets-2020-0068" target="_blank">https://doi.org/10.2478%2Fpopets-2020-0068</a> <a href="#fnref:43" class="footnote-back-ref">↩</a></p></li> <li id="fn:44"><p>Haroon et al. 2021, p. 1. - Haroon, Muhammad; Zaffar, Fareed; Srinivasan, Padmini; Shafiq, Zubair (2021). "Avengers Ensemble! Improving Transferability of Authorship Obfuscation". arXiv:2109.07028. <a href="https://arxiv.org/abs/2109.07028" target="_blank">https://arxiv.org/abs/2109.07028</a> <a href="#fnref:44" class="footnote-back-ref">↩</a></p></li> <li id="fn:45"><p>Bevendorff et al. 2019, p. 1098. - Bevendorff, Janek; Potthast, Martin; Hagen, Matthias; Stein, Benno (2019). "Heuristic Authorship Obfuscation". Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics. pp. 1098–1108. doi:10.18653/v1/P19-1104. <a href="https://doi.org/10.18653%2Fv1%2FP19-1104" target="_blank">https://doi.org/10.18653%2Fv1%2FP19-1104</a> <a href="#fnref:45" class="footnote-back-ref">↩</a></p></li> <li id="fn:46"><p>Saedi & Dras 2020, p. 181. - Saedi, Chakaveh; Dras, Mark (December 2020). "Large Scale Author Obfuscation Using Siamese Variational Auto-Encoder: The SiamAO System". Proceedings of the Ninth Joint Conference on Lexical and Computational Semantics. pp. 179–189. <a href="https://aclanthology.org/2020.starsem-1.19" target="_blank">https://aclanthology.org/2020.starsem-1.19</a> <a href="#fnref:46" class="footnote-back-ref">↩</a></p></li> <li id="fn:47"><p>Neal et al. 2018, p. 27. - Neal, Tempestt; Sundararajan, Kalaivani; Fatima, Aneez; Yan, Yiming; Xiang, Yingfei; Woodard, Damon (2018). "Surveying Stylometry Techniques and Applications". ACM Computing Surveys. 50 (6): 1–36. doi:10.1145/3132039. S2CID 21360798. <a href="https://doi.org/10.1145%2F3132039" target="_blank">https://doi.org/10.1145%2F3132039</a> <a href="#fnref:47" class="footnote-back-ref">↩</a></p></li> <li id="fn:48"><p>Gröndahl & Asokan 2020a, p. 28. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:48" class="footnote-back-ref">↩</a></p></li> <li id="fn:49"><p>Wang, Juola & Riddell 2022, p. 2. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:49" class="footnote-back-ref">↩</a></p></li> <li id="fn:50"><p>Wang, Juola & Riddell 2022, p. 3. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:50" class="footnote-back-ref">↩</a></p></li> <li id="fn:51"><p>Zhai et al. 2022, p. 7374. - Zhai, Wanyue; Rusert, Jonathan; Shafiq, Zubair; Srinivasan, Padmini (2022). "A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscation". Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). pp. 7372–7384. arXiv:2203.11849. doi:10.18653/v1/2022.acl-long.509. S2CID 248780012. <a href="https://arxiv.org/abs/2203.11849" target="_blank">https://arxiv.org/abs/2203.11849</a> <a href="#fnref:51" class="footnote-back-ref">↩</a></p></li> <li id="fn:52"><p>Gröndahl & Asokan 2020a, p. 21-22. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:52" class="footnote-back-ref">↩</a></p></li> <li id="fn:53"><p>Gröndahl & Asokan 2020b, p. 176. - Gröndahl, Tommi; Asokan, N. (2020b). "Effective writing style imitation via combinatorial paraphrasing". arXiv:1905.13464. doi:10.2478/popets-2020-0068. <a href="https://doi.org/10.2478%2Fpopets-2020-0068" target="_blank">https://doi.org/10.2478%2Fpopets-2020-0068</a> <a href="#fnref:53" class="footnote-back-ref">↩</a></p></li> <li id="fn:54"><p>Potthast, Hagen & Stein 2016, p. 6. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:54" class="footnote-back-ref">↩</a></p></li> <li id="fn:55"><p>Potthast, Hagen & Stein 2016, p. 12-13. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:55" class="footnote-back-ref">↩</a></p></li> <li id="fn:56"><p>Potthast, Hagen & Stein 2016, p. 11. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:56" class="footnote-back-ref">↩</a></p></li> <li id="fn:57"><p>Almishari, Oguz & Tsudik 2014, p. 6. - Almishari, Mishari; Oguz, Ekin; Tsudik, Gene (2014). "Fighting Authorship Linkability with Crowdsourcing". Proceedings of the second edition of the ACM conference on Online social networks - COSN '14. pp. 69–82. arXiv:1405.4918. doi:10.1145/2660460.2660486. ISBN 9781450331982. S2CID 7741036. <a href="https://arxiv.org/abs/1405.4918" target="_blank">https://arxiv.org/abs/1405.4918</a> <a href="#fnref:57" class="footnote-back-ref">↩</a></p></li> <li id="fn:58"><p>Xu et al. 2019, p. 247-248. - Xu, Qiongkai; Qu, Lizhen; Xu, Chenchen; Cui, Ran (2019). "Privacy-Aware Text Rewriting". Proceedings of the 12th International Conference on Natural Language Generation. pp. 247–257. doi:10.18653/v1/W19-8633. hdl:1885/317479. <a href="https://doi.org/10.18653%2Fv1%2FW19-8633" target="_blank">https://doi.org/10.18653%2Fv1%2FW19-8633</a> <a href="#fnref:58" class="footnote-back-ref">↩</a></p></li> <li id="fn:59"><p>Kacmarcik & Gamon 2006, p. 448. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:59" class="footnote-back-ref">↩</a></p></li> <li id="fn:60"><p>Haroon et al. 2021, p. 3. - Haroon, Muhammad; Zaffar, Fareed; Srinivasan, Padmini; Shafiq, Zubair (2021). "Avengers Ensemble! Improving Transferability of Authorship Obfuscation". arXiv:2109.07028. <a href="https://arxiv.org/abs/2109.07028" target="_blank">https://arxiv.org/abs/2109.07028</a> <a href="#fnref:60" class="footnote-back-ref">↩</a></p></li> <li id="fn:61"><p>Gröndahl & Asokan 2020b, p. 177. - Gröndahl, Tommi; Asokan, N. (2020b). "Effective writing style imitation via combinatorial paraphrasing". arXiv:1905.13464. doi:10.2478/popets-2020-0068. <a href="https://doi.org/10.2478%2Fpopets-2020-0068" target="_blank">https://doi.org/10.2478%2Fpopets-2020-0068</a> <a href="#fnref:61" class="footnote-back-ref">↩</a></p></li> <li id="fn:62"><p>Emmery, Kádár & Chrupała 2021, p. 2388-2389. - Emmery, Chris; Kádár, Ákos; Chrupała, Grzegorz (2021). "Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling". Proceedings of the 16th Conference of the European Chapter of the Association for Computational Linguistics: Main Volume. pp. 2388–2402. arXiv:2101.11310. doi:10.18653/v1/2021.eacl-main.203. S2CID 231719026. <a href="https://arxiv.org/abs/2101.11310" target="_blank">https://arxiv.org/abs/2101.11310</a> <a href="#fnref:62" class="footnote-back-ref">↩</a></p></li> <li id="fn:63"><p>Potthast, Hagen & Stein 2016, p. 9-10. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:63" class="footnote-back-ref">↩</a></p></li> <li id="fn:64"><p>Gröndahl & Asokan 2020b, p. 189. - Gröndahl, Tommi; Asokan, N. (2020b). "Effective writing style imitation via combinatorial paraphrasing". arXiv:1905.13464. doi:10.2478/popets-2020-0068. <a href="https://doi.org/10.2478%2Fpopets-2020-0068" target="_blank">https://doi.org/10.2478%2Fpopets-2020-0068</a> <a href="#fnref:64" class="footnote-back-ref">↩</a></p></li> <li id="fn:65"><p>Haroon et al. 2021, p. 1. - Haroon, Muhammad; Zaffar, Fareed; Srinivasan, Padmini; Shafiq, Zubair (2021). "Avengers Ensemble! Improving Transferability of Authorship Obfuscation". arXiv:2109.07028. <a href="https://arxiv.org/abs/2109.07028" target="_blank">https://arxiv.org/abs/2109.07028</a> <a href="#fnref:65" class="footnote-back-ref">↩</a></p></li> <li id="fn:66"><p>Potthast, Hagen & Stein 2016, p. 11-12. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:66" class="footnote-back-ref">↩</a></p></li> <li id="fn:67"><p>McDonald et al. 2012, 7.1 Further Work. - McDonald, Andrew W. E.; Afroz, Sadia; Caliskan, Aylin; Stolerman, Ariel; Greenstadt, Rachel (2012). "Use Fewer Instances of the Letter "i": Toward Writing Style Anonymization" (PDF). Privacy Enhancing Technologies. Lecture Notes in Computer Science. Vol. 7384. pp. 299–318. doi:10.1007/978-3-642-31680-7_16. ISBN 978-3-642-31679-1. S2CID 15715170. <a href="http://www.stolerman.net/papers/anonymouth_pets2012.pdf" target="_blank">http://www.stolerman.net/papers/anonymouth_pets2012.pdf</a> <a href="#fnref:67" class="footnote-back-ref">↩</a></p></li> <li id="fn:68"><p>Gröndahl & Asokan 2020a, p. 28. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:68" class="footnote-back-ref">↩</a></p></li> <li id="fn:69"><p>Potthast, Hagen & Stein 2016, p. 12-13. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:69" class="footnote-back-ref">↩</a></p></li> <li id="fn:70"><p>Potthast, Hagen & Stein 2016, p. 13. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:70" class="footnote-back-ref">↩</a></p></li> <li id="fn:71"><p>Potthast, Hagen & Stein 2016, p. 5. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:71" class="footnote-back-ref">↩</a></p></li> <li id="fn:72"><p>Mahmood, Shafiq & Srinivasan 2020, p. 2235. - Mahmood, Asad; Shafiq, Zubair; Srinivasan, Padmini (2020). "A Girl Has a Name: Detecting Authorship Obfuscation". Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics. pp. 2235–2245. arXiv:2005.00702. doi:10.18653/v1/2020.acl-main.203. S2CID 218486757. <a href="https://arxiv.org/abs/2005.00702" target="_blank">https://arxiv.org/abs/2005.00702</a> <a href="#fnref:72" class="footnote-back-ref">↩</a></p></li> <li id="fn:73"><p>Afroz, Brennan & Greenstadt 2012, p. 462. - Afroz, Sadia; Brennan, Michael; Greenstadt, Rachel (2012). "Detecting Hoaxes, Frauds, and Deception in Writing Style Online". 2012 IEEE Symposium on Security and Privacy. pp. 461–475. doi:10.1109/SP.2012.34. ISBN 978-1-4673-1244-8. <a href="https://doi.org/10.1109%2FSP.2012.34" target="_blank">https://doi.org/10.1109%2FSP.2012.34</a> <a href="#fnref:73" class="footnote-back-ref">↩</a></p></li> <li id="fn:74"><p>Juola 2012, p. 93-94. - Juola, Patrick (April 2012). "Detecting Stylistic Deception". Proceedings of the Workshop on Computational Approaches to Deception Detection. pp. 91–96. <a href="https://aclanthology.org/W12-0414/" target="_blank">https://aclanthology.org/W12-0414/</a> <a href="#fnref:74" class="footnote-back-ref">↩</a></p></li> <li id="fn:75"><p>Gröndahl & Asokan 2020a, p. 2. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:75" class="footnote-back-ref">↩</a></p></li> <li id="fn:76"><p>Mahmood, Shafiq & Srinivasan 2020, p. 2243. - Mahmood, Asad; Shafiq, Zubair; Srinivasan, Padmini (2020). "A Girl Has a Name: Detecting Authorship Obfuscation". Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics. pp. 2235–2245. arXiv:2005.00702. doi:10.18653/v1/2020.acl-main.203. S2CID 218486757. <a href="https://arxiv.org/abs/2005.00702" target="_blank">https://arxiv.org/abs/2005.00702</a> <a href="#fnref:76" class="footnote-back-ref">↩</a></p></li> <li id="fn:77"><p>Gröndahl & Asokan 2020a, p. 28. - Gröndahl, Tommi; Asokan, N. (2020a). "Text Analysis in Adversarial Settings: Does Deception Leave a Stylistic Trace?". ACM Computing Surveys. 52 (3): 1–36. arXiv:1902.08939. doi:10.1145/3310331. S2CID 67856540. <a href="https://arxiv.org/abs/1902.08939" target="_blank">https://arxiv.org/abs/1902.08939</a> <a href="#fnref:77" class="footnote-back-ref">↩</a></p></li> <li id="fn:78"><p>Afroz, Brennan & Greenstadt 2012, p. 464. - Afroz, Sadia; Brennan, Michael; Greenstadt, Rachel (2012). "Detecting Hoaxes, Frauds, and Deception in Writing Style Online". 2012 IEEE Symposium on Security and Privacy. pp. 461–475. doi:10.1109/SP.2012.34. ISBN 978-1-4673-1244-8. <a href="https://doi.org/10.1109%2FSP.2012.34" target="_blank">https://doi.org/10.1109%2FSP.2012.34</a> <a href="#fnref:78" class="footnote-back-ref">↩</a></p></li> <li id="fn:79"><p>Juola & Vescovi 2011, p. 123. - Juola, Patrick; Vescovi, Darren (2011). "Analyzing Stylometric Approaches to Author Obfuscation". Advances in Digital Forensics VII. IFIP Advances in Information and Communication Technology. Vol. 361. pp. 115–125. doi:10.1007/978-3-642-24212-0_9. ISBN 978-3-642-24211-3. <a href="https://doi.org/10.1007%2F978-3-642-24212-0_9" target="_blank">https://doi.org/10.1007%2F978-3-642-24212-0_9</a> <a href="#fnref:79" class="footnote-back-ref">↩</a></p></li> <li id="fn:80"><p>Brennan, Afroz & Greenstadt 2012, p. 2. - Brennan, Michael; Afroz, Sadia; Greenstadt, Rachel (2012). "Adversarial stylometry: Circumventing Authorship Recognition to Preserve Privacy and Anonymity" (PDF). ACM Transactions on Information and System Security. 15 (3): 1–22. doi:10.1145/2382448.2382450. S2CID 16176436. <a href="https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf" target="_blank">https://www1.icsi.berkeley.edu/~sadia/papers/adversarial_stylometry.pdf</a> <a href="#fnref:80" class="footnote-back-ref">↩</a></p></li> <li id="fn:81"><p>Kacmarcik & Gamon 2006, p. 451. - Kacmarcik, Gary; Gamon, Michael (17 July 2006). "Obfuscating document stylometry to preserve author anonymity". Proceedings of the COLING/ACL 2006 Main Conference Poster Sessions. pp. 444–451. <a href="https://aclanthology.org/P06-2058/" target="_blank">https://aclanthology.org/P06-2058/</a> <a href="#fnref:81" class="footnote-back-ref">↩</a></p></li> <li id="fn:82"><p>Wang, Juola & Riddell 2022, p. 3. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:82" class="footnote-back-ref">↩</a></p></li> <li id="fn:83"><p>Wang, Juola & Riddell 2022, p. 7-8. - Wang, Haining; Juola, Patrick; Riddell, Allen (2022). "Reproduction and Replication of an Adversarial Stylometry Experiment". arXiv:2208.07395. <a href="https://arxiv.org/abs/2208.07395" target="_blank">https://arxiv.org/abs/2208.07395</a> <a href="#fnref:83" class="footnote-back-ref">↩</a></p></li> <li id="fn:84"><p>Potthast, Hagen & Stein 2016, p. 21. - Potthast, Martin; Hagen, Matthias; Stein, Benno (2016). Author Obfuscation: Attacking the State of the Art in Authorship Verification (PDF). Conference and Labs of the Evaluation Forum. <a href="https://ceur-ws.org/Vol-1609/16090716.pdf" target="_blank">https://ceur-ws.org/Vol-1609/16090716.pdf</a> <a href="#fnref:84" class="footnote-back-ref">↩</a></p></li> <li id="fn:85"><p>Zhai et al. 2022, p. 7373. - Zhai, Wanyue; Rusert, Jonathan; Shafiq, Zubair; Srinivasan, Padmini (2022). "A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscation". Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). pp. 7372–7384. arXiv:2203.11849. doi:10.18653/v1/2022.acl-long.509. S2CID 248780012. <a href="https://arxiv.org/abs/2203.11849" target="_blank">https://arxiv.org/abs/2203.11849</a> <a href="#fnref:85" class="footnote-back-ref">↩</a></p></li> </ol>