Emily Wenger, Josephine Passananti, Arjun Nitin Bhagoji, Yuanshun Yao, Haitao Zheng, Ben Y. Zhao: Backdoor Attacks Against Deep Learning Systems in the Physical World. CVPR 2021: 6206-6215