A survey of practical adversarial example attacks
Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition