Defending Against Model Stealing Attacks Using Deceptive Perturbations
Practical Black-Box Attacks against Machine Learning