Before revision:  Under various complex physical conditions, by injecting only a very small ratio (0.5\%) of backdoor instances, the  success rate of physical backdoor attacks with the PTB method on VGGFace is 82\%, while the attack success rate of backdoor attacks without the proposed PTB method is lower than 11\%.
After revision:  Under various complex physical conditions, by injecting only a very small ratio (0.5\%) of backdoor instances, the attack success rate of physical backdoor attacks with the PTB method on VGGFace is 82\%, while the attack success rate of backdoor attacks without the proposed PTB method is lower than 11\%.