Before revision:  Last, we evaluate the backdoor attack and the results show the excellent performance of with 100 \% backdoor attack success rate and sacrificing of 0.71\% on text classification task.
After revision:  Last, we evaluate the backdoor attacks, and the results show the excellent performance of with 100 \% backdoor attack success rate and sacrificing of 0.71\% on text classification task.