TAB-AUDIT: Detecting AI-Fabricated Scientific Tables via Multi-View Likelihood Mismatch
Organizations: Monash University
Abstract
AI-generated fabricated scientific manuscripts raise growing concerns with large-scale breaches of academic integrity. In this work, we present the first systematic study on detecting AI-generated fabricated scientific tables in empirical NLP papers, as information in tables serve as critical evidence for claims. We construct FabTab, the first benchmark dataset of fabricated manuscripts with tables, comprising 1,173 AI-generated papers and 1,215 human-authored ones in empirical NLP. Through a comprehensive analysis, we identify systematic differences between fabricated and real tables and operationalize them into a set of discriminative features within the TAB-AUDIT framework. The key feature, within-table mismatch, captures the perplexity gap between a table's skeleton and its numerical content. Experimental results show that RandomForest built on these features significantly outperform prior state-of-the-art methods, achieving 0.987 AUROC in-domain and 0.883 AUROC out-of-domain. Our findings highlight experimental tables as a critical forensic signal for detecting AI-generated scientific fraud and provide a new benchmark for future research.
Figures & tables
| Model | P | R | F1 |
|---|---|---|---|
| BERT-base | 72.4 | 70.8 | 71.6 |
| SpanBERT | 76.9 | 75.8 | 76.3 |
| Ours | 98.7 | 98.4 | 98.6 |
| GPT-4o In-Domain Test | GPT-5.2 External Holdout | ||||||||
| Detector | Observer | AUROC | AUPRC | TPR@5% | Real FPR@5% | AUROC | AUPRC | TPR@5% | Real FPR@5% |
| External Baselines | |||||||||
| Binoculars (no training) | shared | 0.683 | 0.701 | 0.385 | 0.108 | – | – | – | – |
| DetectGPT-style (no training) | GPT-2 | 0.397 | 0.430 | 0.015 | 0.020 | – | – | – | – |
| Observer Comparison: TAB-AUDIT (PPL4, LogReg) | |||||||||
| TAB-AUDIT (PPL4, LogReg) | GPT-2 | 0.884 | 0.804 | 0.374 | 0.074 | 0.855 | 0.756 | 0.173 | 0.065 |
Appendix figures & tables13 assets
Supplementary material from the paper’s appendix.
Appendix
| Observer | Baseline | AUROC | AUPRC | TPR@5% | Real FPR@5% | F1 |
|---|---|---|---|---|---|---|
| gpt2 | DigitLaw+Precision(LogReg) | 0.950 | 0.926 | 0.703 | 0.054 | 0.888 |
| gpt2 | DigitsOnlyPPL(LogReg) | 0.890 | 0.818 | 0.256 | 0.039 | 0.838 |
| gpt2 | FusedAll(PPL4+Struct+DigitLaw, LogReg) | 0.986 | 0.971 | 0.856 | 0.030 | 0.955 |
| gpt2 | MismatchOnly(LogReg) | 0.637 | 0.638 | 0.144 | 0.044 | 0.638 |
| gpt2 | Structure+NumCellDensity(LogReg) | 0.969 | 0.939 | 0.882 | 0.044 | 0.944 |
| gpt2 | StructureOnly(LogReg) | 0.963 | 0.915 | 0.851 | 0.049 | 0.937 |
| Detector | Observer | AUROC | AUPRC | TPR@5% | Real FPR@5% | F1 |
|---|---|---|---|---|---|---|
| GPT-5.2 External Holdout | ||||||
| TAB-AUDIT(PPL4, LogReg) | GPT-2 | 0.855 | 0.756 | 0.173 | 0.065 | – |
| TAB-AUDIT(PPL4, LogReg) | Qwen | 0.808 | 0.689 | 0.030 | 0.055 | – |
| TAB-AUDIT(PPL4, LogReg) | Llama | 0.881 | 0.793 | 0.096 | 0.040 | – |
| FusedAll(LogReg) | GPT-2 | 0.825 | 0.738 | 0.061 | 0.039 | 0.401 |
| FusedAll(RandomForest) | GPT-2 | 0.883 | 0.808 | 0.218 | 0.054 | 0.641 |
| Subset | Human | AI | Total Papers | Total Tables |
|---|---|---|---|---|
| Clean benchmark | 1012 | 976 | 1988 | 5284 |
| Train split | 758 | 732 | 1490 | – |
| Validation split | 51 | 49 | 100 | – |
| Test split | 203 | 195 | 398 | – |
| GPT-5.2 holdout | 203 | 197 | 400 | 1324 |
| Prompt-only baseline | 1012 | 20 | 1032 | 3274 |
| Stage | Human | AI | Total |
|---|---|---|---|
| Indexed source pool | 1118 | 993 | 2111 |
| Dropped during filtering | 106 | 17 | 123 |
| Final usable benchmark | 1012 | 976 | 1988 |
| Metric | Human | GPT4o | Qwen3-8B | Llama3.1-8B | min | mean |
|---|---|---|---|---|---|---|
| Row -consistency | 0.497 0.433 | 0.235 0.390 | 0.187 0.359 | 0.206 0.367 | 0.64 | 0.71 |
| Most-common value rate | 0.113 0.138 | 0.199 0.136 | 0.229 0.153 | 0.220 0.153 | 0.63 | 0.72 |
| Strict monotone-column rate | 0.190 0.324 | 0.418 0.438 | 0.445 0.461 | 0.560 0.474 | 0.59 | 0.71 |
| Mean Spearman trend strength | 0.558 0.262 | 0.704 0.244 | 0.733 0.256 | 0.770 0.267 | 0.58 | 0.68 |
| Row % -consistency | 0.357 0.374 | 0.169 0.339 | 0.153 0.296 | 0.150 0.315 | 0.53 | 0.58 |
| Mean column sortedness | 0.754 0.133 | 0.811 0.150 | 0.831 0.154 | 0.864 0.154 | 0.40 | 0.57 |
| Test Set | Train Source | Observer | AUROC | AUPRC | TPR@5% | Real FPR@5% |
|---|---|---|---|---|---|---|
| In-domain (GPT-4o test) | ||||||
| in-domain | GPT-4o | GPT-2 | 0.938 | 0.936 | 0.723 | 0.064 |
| in-domain | Llama3.1 | GPT-2 | 0.902 | 0.911 | 0.596 | 0.043 |
| in-domain | Qwen2.5 | GPT-2 | 0.925 | 0.930 | 0.638 | 0.043 |
| in-domain | GPT-4o | Qwen | 0.933 | 0.932 | 0.894 | 0.170 |
| in-domain | Llama3.1 | Qwen | 0.925 | 0.918 | 0.830 | 0.170 |
| Experiment | Eval. set | Papers | AUROC | AUPRC | Comment |
|---|---|---|---|---|---|
| GPT5.2 Holdout set | Clean test split | 398 | 0.8857 | 0.8093 | 203 human / 195 AI papers |
| Prompt-only baseline | Prompt-only test split | 796 | 0.973 | 0.886 | 398 Human vs 398 prompt-only pseudo-papers |
| Statistic | Count |
|---|---|
| Total examples | 353,266 |
| Unique languages | 2,077 |
| Train examples | 340,251 |
| Eval examples | 6,148 |
| Test examples | 6,867 |
| No glottocode | 13,428 |
| Model | Coherence Score | Token Consumption |
|---|---|---|
| Baseline (ACR) | 0.72 | 1.2M tokens |
| Proposed Framework | 0.83 | 0.9M tokens |
| System | EN EN | EN ZH | ZH EN | ZH ZH | Avg |
|---|---|---|---|---|---|
| Base (no retrieval) | 54.2 | 52.8 | 50.9 | 51.6 | 52.4 |
| RAG | 67.5 | 64.1 | 62.7 | 63.4 | 64.4 |
| RAG + LangControl | 68.1 | 66.8 | 65.9 | 66.2 | 66.8 |
| ReaL-RAG | 68.4 | 67.2 | 66.1 | 66.5 | 67.1 |
| Model/System | Dataset | Accuracy (%) |
|---|---|---|
| XLM-R (fine-tuned) | Amazon Reviews (EN) | 92.3 |
| mBERT (fine-tuned) | Amazon Reviews (EN) | 90.8 |
| XLM-R (fine-tuned) | Amazon Reviews (DE) | 89.7 |
| mBERT (fine-tuned) | Amazon Reviews (DE) | 88.5 |
| XLM-R (fine-tuned) | Twitter Sentiment (ES) | 85.4 |
| mBERT (fine-tuned) | Twitter Sentiment (ES) | 83.6 |
AI-Generated Text Detection
AI-generated text detection develops methods to distinguish human-written, machine-generated, and AI-edited text.
See all 170 papers