Cheng, S., Y. Liu, S. Ma, and X. Zhang. “Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 2, May 2021, pp. 1148-56, https://ojs.aaai.org/index.php/AAAI/article/view/16201.