Before revision: Most adversarial attack methods on text classification are designed to change the classifier's prediction by modifying few words or characters.
After revision: Most adversarial attack methods on text classification can change the classifier's prediction by modifying few words or characters.