Before revision:  Restricted to a variety of physical constrains , the performance of backdoor attacks in the real  world will be severely degraded.
After revision:  Restricted to a variety of physical constrains , the performance of backdoor attacks in the real physical world will be severely degraded.