S. Fang and A. Choromanska, “Backdoor Attacks on the DNN Interpretation System”, AAAI, vol. 36, no. 1, pp. 561-570, Jun. 2022.