P. Fang and J. Chen, “On the Vulnerability of Backdoor Defenses for Federated Learning”, AAAI, vol. 37, no. 10, pp. 11800-11808, Jun. 2023.