Before revision:  Last, we evaluate the backdoor attack and the results show the excellent performance of with 100\% backdoor attack  rate and sacrificing of 0.71\% on text classification text .
After revision:  Last, we evaluate the backdoor attack and the results show the excellent performance of with 100\% backdoor attack rate and sacrificing of 0.71\% on text classification task .