Before revision:  Then, we propose the different attack  strategies to generate trigger on text data . Next, we propose different types of the triggers based on modification scope, human recognition  and special cases.
After revision:  Then, we propose the different attack on NLP models. Moreover, we exploit the various attack strategies to generate trigger on text data . Next, we propose different types of the triggers based on modification scope, human recognition and special cases.