A Additional Related Works We review the recent studies in OOD detection, model reprogramming, and backdoor attack