Robust Backdoor Attack Against Federated Learning