J. Jia, Y. Liu, X. Cao, and N. Z. Gong, “Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks”, AAAI, vol. 36, no. 9, pp. 9575-9583, Jun. 2022.