Jia, J., X. Cao, and N. Z. Gong. “Intrinsic Certified Robustness of Bagging Against Data Poisoning Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 9, May 2021, pp. 7961-9, doi:10.1609/aaai.v35i9.16971.