Baracaldo, N., Ahmed, F., Eykholt, K., Zhou, Y., Priya, S., Lee, T., … Slater, D. (2023). Benchmarking the Effect of Poisoning Defenses on the Security and Bias of Deep Learning Models. In (p. 45—56). http://doi.org/10.1109/SPW59333.2023.00010 (Original work published 2025)