A. Emanuele Cinà, Vascon, S., Demontis, A., Biggio, B., Roli, F., e Pelillo, M.,
«The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?», in
International Joint Conference on Neural Networks, (IJCNN) 2021, Shenzhen, China, 2021, pagg 1–8.