Cheng, S. (2021) “Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification”, Proceedings of the AAAI Conference on Artificial Intelligence, 35(2), pp. 1148–1156. doi: 10.1609/aaai.v35i2.16201.