1. Bullseye polytope: A scalable clean-label poisoning attack with improved transferability;Aghakhani,2021
2. Evasion attacks against machine learning at test time;Biggio,2013
3. Poisoning attacks against support vector machines;Biggio,2012
4. Detecting backdoor attacks on deep neural networks by activation clustering;Chen,2018
5. Targeted backdoor attacks on deep learning systems using data poisoning;Chen,2017