Jia, J.; Liu, Y.; Cao, X.; Gong, N. Z. Certified Robustness of Nearest Neighbors Against Data Poisoning and Backdoor Attacks. AAAI 2022, 36, 9575-9583.