Before revision:  Existing text attack methods, moreover, are effective but not efficient enough to be incorporated into practical text adversarial training.
After revision:  Existing text attack methods, moreover, are effective but not efficient to be incorporated into practical text adversarial training.