The full table, top ten
Attack success counts a case only when the benign answer was right and the attacked answer was not. Benign accuracy is the share of benign cases answered correctly.
| Rank | Model | Attack success | 95 percent interval | Benign accuracy |
|---|