Alfeld, S. et al. 2019. Attacking Data Transforming Learners at Training Time. Proceedings of the AAAI Conference on Artificial Intelligence. 33, 01 (Jul. 2019), 3167–3174. DOI:https://doi.org/10.1609/aaai.v33i01.33013167.