Alfeld, S., A. Vartanian, L. Newman-Johnson, and B. I. Rubinstein. “Attacking Data Transforming Learners at Training Time”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 33, no. 01, July 2019, pp. 3167-74, doi:10.1609/aaai.v33i01.33013167.