(1)
Alfeld, S.; Vartanian, A.; Newman-Johnson, L.; Rubinstein, B. I. Attacking Data Transforming Learners at Training Time. AAAI 2019, 33, 3167-3174.