Model

Attack Method

USR%/TSR%

Perturbation%

TextFooler

32.3/17.8

11.6/13.4

KernelGAT

FastAttacker(+f_t)

53.8/33.4

23.9/29.1

Acc:

FastAttacker(+f_e)

40.7/23.2

21.4/22.2

FastAttacker(+f_b)

76.5/63.8

30.9/36.3

FastAttacker(+f_all)

86.2/68.5

39.0/36.9

BERT-Attack

80.3/44.9

25.0/30.3