Q. Duan, Z. Hua, Q. Liao, Y. Zhang, and L. Y. Zhang, “Conditional Backdoor Attack via JPEG Compression”, AAAI, vol. 38, no. 18, pp. 19823-19831, Mar. 2024.