Chen X, Salem A, Chen D, Backes M, Ma S, Shen Q, Wu Z, Zhang Y. BadNL: Backdoor Attacks against NLP Models with Semantic-preserving Improvements, in ACSAC '21: Annual Computer Security Applications Conference, Virtual Event, USA, December 6 - 10, 2021. ACM; 2021:554–569.