Spectral Signatures in Backdoor Attacks
Support vector machines under adversarial label contamination