B. Zhao and Y. Lao, “CLPA: Clean-Label Poisoning Availability Attacks Using Generative Adversarial Nets”, AAAI, vol. 36, no. 8, pp. 9162-9170, Jun. 2022.