Before revision:  However, most existing works currently focus on evasion attack on text data instead of positioning attack, also named backdoor attack .
After revision:  However, most existing works currently focus on evasion attack on text data instead of positioning attack, also named backdoor attack .