@misc{indiciae9962a4f8ccc5,
  title = {Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting},
  author = {Xiangyu Qi and Jifeng Zhu and Chulin Xie and Yong Yang},
  year = {2021},
  url = {https://arxiv.org/abs/2107.07240},
  note = {Source identifier: 2107.07240}
}