Organizations: Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China · School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China
Large Language Models (LLMs) are widely applied across various domains due to their powerful text generation capabilities. While LLM-generated texts often resemble human-written ones, their misuse can lead to significant societal risks. Detecting such texts is an essential technique for mitigating LLM misuse, and many detection methods have shown promising results across different datasets. However, real-world scenarios often involve out-of-domain inputs or adversarial samples, which can affect the performance of detection methods to varying degrees. Furthermore, most existing research has focused on English texts, with limited work addressing Chinese text detection. In this study, we propose EnsemJudge, a robust framework for detecting Chinese LLM-generated text by incorporating tailored strategies and ensemble voting mechanisms. We trained and evaluated our system on a carefully constructed Chinese dataset provided by NLPCC2025 Shared Task 1. Our approach outperformed all baseline methods and achieved first place in the task, demonstrating its effectiveness and reliability in Chinese LLM-generated text detection. Our code is available at https://github.com/johnsonwangzs/MGT-Mini.
Figures & tables
Figure 1: The EnsemJudge Detection Framework.
Split
Label Counts
Data Type
LLM
Human
Total
Normal
Attack
Varying Length
train
24300
8100
32400
✓
×
×
dev
1700
1100
2800
✓
×
×
test
5500
5500
11000
✓
✓
✓
Table 1: Details of the dataset provided by NLPCC2025 Shared Task 1.
text type
w1
w2
w3
w4
w5
w6
w7
w8
w9
w10
w11
w12
w13
w14
w15
w16
w17
w18
λ
τ
ext. short
0
10
0
10
10
60
60
55
60
0
0
0
0
0
95
400
10
0
250
0
short
0
10
0
10
40
40
40
35
40
0
0
0
0
40
95
400
40
0
150
0
medium
0
10
0
10
40
40
40
35
40
0
0
0
0
100
80
90
40
0
0
0
general
0
10
10
10
40
70
70
70
75
50
60
0
85
400
40
60
80
0
0
0
Table 2: The hyper-parameters used in our system. The order of the weights w corresponds to the order of the base models listed in Table 3 .
Model Name
All
Normal
Attack
Varying Length (Short Text)
Mixed
Paraphrase
Perturbation
64
128
256
512
1-11000
1-4000
4001-5000
5001-6000
6001-7000
7001-8000
8001-9000
9001-10000
10001-11000
SpecialToken
0.3334
0.3333
0.3338
0.3333
0.3333
0.3333
0.3333
0.3333
0.3333
ConsecutivePunctuation
0.3377
0.3367
0.3395
0.3400
0.3400
0.3333
0.3356
0.3400
0.3400
CommonPhrase
0.5299
0.5926
0.5122
0.6306
0.5325
0.3813
0.4020
0.4324
0.4681
SentenceSegment
0.5899
0.5919
0.6225
0.6361
0.6387
0.4864
0.5373
0.5627
0.6243
Table 3: Main results on test set.
Figure 2: Model performance (macro F1-score) for our system and different base models.
Recently, large language models (LLMs) are capable of generating highly fluent textual content. While they offer significant convenience to humans, they also introduce various risks, like phishing and academic dishonesty. Numerous research efforts have been dedicated to developing algorithms for detecting AI-generated text and constructing relevant datasets. However, in the domain of Chinese corpora, challenges remain, including limited model diversity and data homogeneity. To address these issues, we propose C-ReD: a comprehensive Chinese Real-prompt AI-generated Detection benchmark. Experiments demonstrate that C-ReD not only enables reliable in-domain detection but also supports strong generalization to unseen LLMs and external Chinese datasets-addressing critical gaps in model diversity, domain coverage, and prompt realism that have limited prior Chinese detection benchmarks. We release our resources at https://github.com/HeraldofLight/C-ReD.
Chenxi Qing, Junxi Wu, Zheng Liu +5
Tsinghua University · Nankai University · Harbin Institute of Technology, Shenzhen +2
The rapid development of large language models (LLMs) has increased the need for reliable detection of LLM-generated text, especially in realistic Chinese scenarios involving human-written text (HWT), LLM-generated text (LGT), and LLM-refined text (HLT). This paper presents EVIL-Detect, a multi-signal ensemble framework with conflict-aware fusion for NLPCC 2026 Shared Task 6. The system integrates edit-extent regression, zero-shot likelihood-contrast signals, lexical statistics, and conservative text rules. With calibrated decision boundaries and conflict-aware integration, our system improves robustness under strong out-of-distribution shifts, achieving a macro-F1 score of 0.8888 and ranking first in the official evaluation. Our code is available at https://github.com/bbbbhrrrr/evildetect.
Hongrui Bao, Hangyu Rong, Zhuoshang Wang +2
Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China · School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China
The effective detection and governance of Large Language Model (LLM) generated content has become increasingly critical due to the growing risk of misuse. Despite the impressive performance of existing detectors, their reliability and potential in multilingual, real-world scenarios remain largely underexplored. In this study, we introduce DetectRL-X, a comprehensive multilingual benchmark designed to evaluate advanced detectors across 8 dimensions. The benchmark encompasses 8 languages commonly used in commercial contexts and collects human-written texts from 6 domains highly susceptible to LLM misuse. To better aligned with real-world applications, We create LLM-generated texts using 4 popular commercial LLMs, and include typical AI-assisted writing operations such as polishing, expanding, and condensing to capture authentic usage patterns. Furthermore, we develop a multilingual framework for paraphrasing and perturbation attacks to simulate diverse human modifications and writing noise, enabling stress testing of detectors across languages. Experimental results on DetectRL-X reveal the strengths and limitations of current state-of-the-art detectors when applied to diverse linguistic resources. We further analyze how domains, generators, attack strategies, text length, and refinement operations influence performance in different languages, underscoring DetectRL-X as an effective benchmark for strengthening multilingual and language-specific detectors.
Junchao Wu, Yefeng Liu, Chenyu Zhu +8
NLP2CT Lab, Department of Computer and Information Science, University of Macau · Alibaba Group · Xiamen University