Shaohua Ding, Yulong Tian, Fengyuan Xu, Qun Li, Sheng Zhong: Trojan Attack on Deep Generative Models in Autonomous Driving. SecureComm (1) 2019: 299-318