Before revision:  By empirically studying three state-of-the-art LMs (BERT, GPT-2, XLNet) in a range of security-sensitive NLP tasks (toxic comment classification , question answering, text completion)  , we demonstrate that TROJAN-ML possesses the following properties: (i)  efficacy -
After revision:  By empirically studying three state-of-the-art LMs (BERT, GPT-2, XLNet) in a range of security-sensitive NLP tasks (toxic comment classification , question answering, text completion) as well as user studies on crowdsourcing platforms , we demonstrate that TROJAN-ML possesses the following properties: (i) efficacy -