Fang, P.; Chen, J. On the Vulnerability of Backdoor Defenses for Federated Learning. AAAI 2023, 37, 11800-11808.