Adversary Impact (∆ acc) We compare the accuracy of the adversary on the generated sentence to that of the original to assess obfuscation strength.
as our goal is to keep the adversary's performance level close to chance, we define ∆ accuracy = accuracy − p where p is majority baseline.