We experiment with five benchmark attacking methods for texts: FGM, FGVM, DeepFool BIBREF5, HotFlip BIBREF3) and TYC BIBREF4. 
 Question: What are the benchmark attacking methods?
FGM, FGVM, DeepFool BIBREF5, HotFlip BIBREF3) and TYC BIBREF4