Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class

Neural Information Processing Systems 

In recent years, machine learning models have been shown to be vulnerable to backdoor attacks.