step	attack	AUROC
1	no_attack	0.3165
1	t5_paraphrase	0.0000
1	synonym_replacement	0.2741
1	homoglyphs	0.1819
1	article_deletion	0.4621
1	misspelling	0.4607
5	no_attack	0.5960
5	t5_paraphrase	0.8000
5	synonym_replacement	0.8540
5	homoglyphs	0.8720
5	article_deletion	0.7343
5	misspelling	0.8829
10	no_attack	0.8791
10	t5_paraphrase	0.9800
10	synonym_replacement	0.9994
10	homoglyphs	1.0000
10	article_deletion	0.9445
10	misspelling	0.9736
15	no_attack	0.9731
15	t5_paraphrase	0.9800
15	synonym_replacement	0.9981
15	homoglyphs	1.0000
15	article_deletion	0.9925
15	misspelling	0.9957
20	no_attack	0.9948
20	t5_paraphrase	0.9800
20	synonym_replacement	0.9961
20	homoglyphs	0.9992
20	article_deletion	0.9964
20	misspelling	0.9976
25	no_attack	0.9951
25	t5_paraphrase	0.9800
25	synonym_replacement	0.9935
25	homoglyphs	0.9994
25	article_deletion	0.9963
25	misspelling	0.9970
30	no_attack	0.9956
30	t5_paraphrase	0.9800
30	synonym_replacement	0.9991
30	homoglyphs	0.9997
30	article_deletion	0.9974
30	misspelling	0.9985
35	no_attack	0.9966
35	t5_paraphrase	1.0000
35	synonym_replacement	0.9998
35	homoglyphs	1.0000
35	article_deletion	0.9982
35	misspelling	0.9996
40	no_attack	0.9966
40	t5_paraphrase	1.0000
40	synonym_replacement	0.9998
40	homoglyphs	1.0000
40	article_deletion	0.9981
40	misspelling	0.9995
45	no_attack	0.9966
45	t5_paraphrase	1.0000
45	synonym_replacement	0.9998
45	homoglyphs	1.0000
45	article_deletion	0.9982
45	misspelling	0.9997
50	no_attack	0.9966
50	t5_paraphrase	1.0000
50	synonym_replacement	0.9997
50	homoglyphs	1.0000
50	article_deletion	0.9981
50	misspelling	0.9996
55	no_attack	0.9966
55	t5_paraphrase	1.0000
55	synonym_replacement	0.9997
55	homoglyphs	1.0000
55	article_deletion	0.9981
55	misspelling	0.9995
60	no_attack	0.9966
60	t5_paraphrase	1.0000
60	synonym_replacement	0.9997
60	homoglyphs	1.0000
60	article_deletion	0.9980
60	misspelling	0.9997
65	no_attack	0.9966
65	t5_paraphrase	1.0000
65	synonym_replacement	0.9997
65	homoglyphs	1.0000
65	article_deletion	0.9981
65	misspelling	0.9997
70	no_attack	0.9966
70	t5_paraphrase	1.0000
70	synonym_replacement	0.9998
70	homoglyphs	1.0000
70	article_deletion	0.9983
70	misspelling	0.9995
75	no_attack	0.9966
75	t5_paraphrase	1.0000
75	synonym_replacement	0.9998
75	homoglyphs	1.0000
75	article_deletion	0.9983
75	misspelling	0.9998
80	no_attack	0.9966
80	t5_paraphrase	1.0000
80	synonym_replacement	0.9998
80	homoglyphs	1.0000
80	article_deletion	0.9981
80	misspelling	0.9998
85	no_attack	0.9966
85	t5_paraphrase	1.0000
85	synonym_replacement	0.9998
85	homoglyphs	1.0000
85	article_deletion	0.9982
85	misspelling	0.9996
90	no_attack	0.9966
90	t5_paraphrase	1.0000
90	synonym_replacement	0.9997
90	homoglyphs	1.0000
90	article_deletion	0.9981
90	misspelling	0.9998
95	no_attack	0.9966
95	t5_paraphrase	1.0000
95	synonym_replacement	0.9998
95	homoglyphs	1.0000
95	article_deletion	0.9981
95	misspelling	0.9997
100	no_attack	0.9966
100	t5_paraphrase	1.0000
100	synonym_replacement	0.9998
100	homoglyphs	1.0000
100	article_deletion	0.9984
100	misspelling	0.9995
105	no_attack	0.9966
105	t5_paraphrase	1.0000
105	synonym_replacement	0.9998
105	homoglyphs	1.0000
105	article_deletion	0.9981
105	misspelling	0.9996
110	no_attack	0.9966
110	t5_paraphrase	1.0000
110	synonym_replacement	0.9998
110	homoglyphs	1.0000
110	article_deletion	0.9981
110	misspelling	0.9996
115	no_attack	0.9966
115	t5_paraphrase	1.0000
115	synonym_replacement	0.9998
115	homoglyphs	1.0000
115	article_deletion	0.9982
115	misspelling	0.9997
120	no_attack	0.9966
120	t5_paraphrase	1.0000
120	synonym_replacement	0.9998
120	homoglyphs	1.0000
120	article_deletion	0.9982
120	misspelling	0.9998
125	no_attack	0.9966
125	t5_paraphrase	1.0000
125	synonym_replacement	0.9998
125	homoglyphs	1.0000
125	article_deletion	0.9981
125	misspelling	0.9996
130	no_attack	0.9966
130	t5_paraphrase	1.0000
130	synonym_replacement	0.9998
130	homoglyphs	1.0000
130	article_deletion	0.9981
130	misspelling	0.9997
135	no_attack	0.9966
135	t5_paraphrase	1.0000
135	synonym_replacement	0.9998
135	homoglyphs	1.0000
135	article_deletion	0.9982
135	misspelling	0.9998
140	no_attack	0.9966
140	t5_paraphrase	1.0000
140	synonym_replacement	0.9998
140	homoglyphs	1.0000
140	article_deletion	0.9981
140	misspelling	0.9995
145	no_attack	0.9966
145	t5_paraphrase	1.0000
145	synonym_replacement	0.9998
145	homoglyphs	1.0000
145	article_deletion	0.9980
145	misspelling	0.9998
150	no_attack	0.9966
150	t5_paraphrase	1.0000
150	synonym_replacement	0.9997
150	homoglyphs	1.0000
150	article_deletion	0.9980
150	misspelling	0.9995
155	no_attack	0.9966
155	t5_paraphrase	1.0000
155	synonym_replacement	0.9997
155	homoglyphs	1.0000
155	article_deletion	0.9980
155	misspelling	0.9994
160	no_attack	0.9966
160	t5_paraphrase	1.0000
160	synonym_replacement	0.9997
160	homoglyphs	1.0000
160	article_deletion	0.9980
160	misspelling	0.9995