Cheng, Siyuan, Yingqi Liu, Shiqing Ma, and Xiangyu Zhang. “Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification”. Proceedings of the AAAI Conference on Artificial Intelligence 35, no. 2 (May 18, 2021): 1148-1156. Accessed October 17, 2021. https://ojs.aaai.org/index.php/AAAI/article/view/16201.