L. Fan, F. He, T. Si, W. Tang, and B. Li, “Invisible Backdoor Attack against 3D Point Cloud Classifier in Graph Spectral Domain”, AAAI, vol. 38, no. 19, pp. 21072–21080, Mar. 2024.