Textual Backdoor Attack for the Text Classification System

Figure 10

Value of the target model’s loss function according to step count with the backdoor samples constructed from the MR dataset.