Before revision:  Last, we evaluate the backdoor attack and the results show the excellent performance of with 100  %DIF < backdoor attack rate and sacrificing of 0.71\\% on text classification text.abstract 
After revision:  Last, we evaluate the backdoor attack and the results show the excellent performance of with 100  %DIF < backdoor attack rate and sacrificing of 0.71\\% on text classification text.abstract \% backdoor attack rate and sacrificing of 0.71\% on text classification text.