Cheng, Siyuan, Yingqi Liu, Shiqing Ma, and Xiangyu Zhang. 2021. “Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification”. Proceedings of the AAAI Conference on Artificial Intelligence 35 (2):1148-56. https://doi.org/10.1609/aaai.v35i2.16201.