3

Turning a Curse Into a Blessing: Enabling Clean-Data-Free Defenses by Model Inversion
One-round active learning
Zero-Round Active Learning