step	attack	AUROC
1	no_attack	0.3165
1	t5_paraphrase	0.0000
1	synonym_replacement	0.2741
1	homoglyphs	0.1819
1	article_deletion	0.4621
1	misspelling	0.4607
5	no_attack	0.5960
5	t5_paraphrase	0.8000
5	synonym_replacement	0.8540
5	homoglyphs	0.8720
5	article_deletion	0.7343
5	misspelling	0.8829
10	no_attack	0.8791
10	t5_paraphrase	0.9800
10	synonym_replacement	0.9994
10	homoglyphs	1.0000
10	article_deletion	0.9445
10	misspelling	0.9736
15	no_attack	0.9731
15	t5_paraphrase	0.9800
15	synonym_replacement	0.9981
15	homoglyphs	1.0000
15	article_deletion	0.9925
15	misspelling	0.9957
20	no_attack	0.9948
20	t5_paraphrase	0.9800
20	synonym_replacement	0.9961
20	homoglyphs	0.9992
20	article_deletion	0.9964
20	misspelling	0.9976
25	no_attack	0.9951
25	t5_paraphrase	0.9800
25	synonym_replacement	0.9935
25	homoglyphs	0.9994
25	article_deletion	0.9963
25	misspelling	0.9970
30	no_attack	0.9956
30	t5_paraphrase	0.9800
30	synonym_replacement	0.9991
30	homoglyphs	0.9997
30	article_deletion	0.9974
30	misspelling	0.9985