@misc{salem2020dynamic,
  title={Dynamic Backdoor Attacks Against Machine Learning Models},
  author={Ahmed Salem and Rui Wen and Michael Backes and Shiqing Ma and Yang Zhang},
  year={2020},
  eprint={2003.03675},
  archivePrefix={arXiv},
  primaryClass={cs.CR},
  url={https://arxiv.org/abs/2003.03675}
}