Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering
Understanding deep learning requires rethinking generalization