Cheng S, Liu Y, Ma S, Zhang X. Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification. AAAI [Internet]. 2021May18 [cited 2024Jul.16];35(2):1148-56. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/16201