PRADA: Protecting Against DNN Model Stealing Attacks
The German Traffic Sign Recognition Benchmark: A multi-class classification competition