STRIP: A Defence Against Trojan Attacks on Deep Neural Networks
Robust Physical-World Attacks on Deep Learning Visual Classification