@misc{li2021anti, title={Anti-Backdoor Learning: Training Clean Models on Poisoned Data}, author={Yige Li and Xixiang Lyu and Nodens Koren and Lingjuan Lyu and Bo Li and Xingjun Ma}, year={2021}, eprint={2110.11571}, archivePrefix={arXiv}, primaryClass={cs.LG}, url={https://arxiv.org/abs/2110.11571} }