@article{subnetreplacementdeploymentstagebackdoor,
  title = {Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting},
  author = {Xiangyu Qi and Jifeng Zhu and Chulin Xie and Yong Yang},
  year = {2021},
  eprint = {2107.07240},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2107.07240v1},
}