BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning - Citation Graph | Papersgraph