Defending Against Model Stealing Attacks Using Deceptive Perturbations
Bidirectional recurrent neural networks