Rethinking CNN's Generalization to Backdoor Attack from Frequency Domain. - Quanrui Rao; Lin Wang; Wuying Liu (ICLR, 2024)