Defending Against Model Stealing Attacks Using Deceptive Perturbations
Rethinking the Inception Architecture for Computer Vision