Soft biometric privacy: Retaining biometric utility of face images while perturbing gender
Intriguing properties of neural networks