Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition
Practical Evasion of a Learning-Based Classifier: A Case Study