Jia, J., Cao, X., & Gong, N. Z. (2021). Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks. Proceedings of the AAAI Conference on Artificial Intelligence, 35(9), 7961-7969. https://doi.org/10.1609/aaai.v35i9.16971