Before revision:  Experimental results on the state-of-the-art face recognition model show that, compared with the  methods that without PTB, the proposed attack method can significantly improve the performance of backdoor attacks in real physical world.
After revision:  Experimental results on the state-of-the-art face recognition model show that, compared with the backdoor methods that without PTB, the proposed attack method can significantly improve the performance of backdoor attacks in real physical world.