Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks
Understanding Black-box Predictions via Influence Functions