To further verify that the perturbations in the adversarial examples are hard for humans to recognize, we find six workers on Amazon Mechanical Turk to evaluate the examples generated by PWWS.
we select 100 clean texts in IMDB and the corresponding adversarial examples generated on word-based CNN.