Cheng, S., Liu, Y., Ma, S. and Zhang, X. (2021) “Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification”, Proceedings of the AAAI Conference on Artificial Intelligence, 35(2), pp. 1148-1156. doi: 10.1609/aaai.v35i2.16201.