Cheng, S., Liu, Y., Ma, S., & Zhang, X. (2021). Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification. Proceedings of the AAAI Conference on Artificial Intelligence, 35(2), 1148-1156. https://doi.org/10.1609/aaai.v35i2.16201