Fan C, Li X, Meng Y, Sun X, Ao X, Wu F, Li J, Zhang T. Defending against backdoor attacks in natural language generation. arXiv preprint arXiv:2106.01810. 2021.