Shan, Bhagoji, Zheng, Zhao, 2021. Traceback of Data Poisoning Attacks in Neural Networks.