step	attack	AUROC
1	no_attack	0.3165
1	t5_paraphrase	0.0000
1	synonym_replacement	0.2741
1	homoglyphs	0.1819
1	article_deletion	0.4621
1	misspelling	0.4607