A. Vartanian, W. Rosenbaum, and S. Alfeld, “Training-Time Attacks against K-nearest Neighbors”, AAAI, vol. 37, no. 8, pp. 10053–10060, Jun. 2023.