Textual Backdoor Attack for the Text Classification System

Figure 7

Three sentence pair examples from the IMDB dataset: original sentence and corresponding backdoor sentence with the trigger at the end of the sentence for .