Before revision:  In particular, we propose a tree-based autoencoder to encode discrete text data into continuous vector space, upon which we optimize the adversarial perturbation.
After revision:  In particular, we propose a tree-based autoencoder to embed the discrete text data into continuous vector space, upon which we optimize the adversarial perturbation.