T. Wang, Y. Yao, F. Xu, M. Xu, S. An, and T. Wang, “Inspecting Prediction Confidence for Detecting Black-Box Backdoor Attacks”, AAAI, vol. 38, no. 1, pp. 274–282, Mar. 2024.