Before revision:  Experimental results show that, the  proposed defense method reduces the backdoor attack success rates from 99.47\%, 99.77\% and 97.89\% to 0.37\%, 0.24\% and 0.09\% on Fashion-MNIST, CIFAR-10 and GTSRB datasets, respectively.
After revision:  Experimental results show that, the proposed defense method is 99.63\%, 99.76\% and 99.91\% on Fashion-MNIST, CIFAR-10 and GTSRB datasets, respectively.