T. Huynh, D. Nguyen, T. Pham, and A. Tran, “COMBAT: Alternated Training for Effective Clean-Label Backdoor Attacks”, AAAI, vol. 38, no. 3, pp. 2436-2444, Mar. 2024.