Date
Publisher
arXiv
Plagiarism in programming assignments is a persistent issue in computer
science education, increasingly complicated by the emergence of automated
obfuscation attacks. While software plagiarism detectors are widely used to
identify suspicious similarities at scale and are resilient to simple
obfuscation techniques, they are vulnerable to advanced obfuscation based on
structural modification of program code that preserves the original program
behavior. While different defense mechanisms have been proposed to increase
resilience against these attacks, their current evaluation is limited to the
scope of attacks used and lacks a comprehensive investigation regarding
AI-based obfuscation. In this paper, we investigate the resilience of these
defense mechanisms against a broad range of automated obfuscation attacks,
including both algorithmic and AI-generated methods, and for a wide variety of
real-world datasets. We evaluate the improvements of two defense mechanisms
over the plagiarism detector JPlag across over four million pairwise program
comparisons. Our results show significant improvements in detecting obfuscated
plagiarism instances, and we observe an improved detection of AI-generated
programs, even though the defense mechanisms are not designed for this use
case. Based on our findings, we provide an in-depth discussion of their broader
implications for academic integrity and the role of AI in education.
Study at a glance
- Question: How effectively do code defense mechanisms help software plagiarism detectors resist algorithmic and AI-based obfuscation attacks?
- Setting and data: Six university programming course datasets across Java and C++, comprising over 14,000 files and over 4.1 million pairwise program comparisons.
- Method: Benchmark evaluation comparing defense mechanisms to baseline JPlag using Wilcoxon signed-rank tests and Cliff's delta effect sizes.
Why it matters
Automated code obfuscation attacks, including those using generative AI, undermine software plagiarism detectors in programming courses. Educators need reliable defense mechanisms that maintain academic integrity without producing false accusations.
Key findings
- Combining the defense mechanisms significantly improved detection against insertion-based obfuscation, increasing median similarity differences by up to 99.65 percentage points.
- The defense mechanisms increased median similarity differences by up to 22 percentage points against refactoring attacks and up to 19 percentage points against AI-based obfuscation.
- Although not specifically designed for this purpose, the defense mechanisms increased the detection difference between AI-generated programs and human submissions by up to 8.92 percentage points.
Summary drafted with AI from the full paper and may contain errors. See the full paper for details.
What is the application?
Who is the user?
Who age?
Why use AI?
Study design
