@inproceedings{adversarial:ccs16,
  author =       {Mahmood Sharif and Sruti Bhagavatula and Lujo Bauer and Michael K. Reiter},
  title =        {Accessorize to a crime: {R}eal and stealthy attacks on state-of-the-art face recognition},
  booktitle =    {Proceedings of the 23rd ACM SIGSAC Conference on Computer and Communications Security},
  year =         2016,
  month =        oct,
  keywords =     {adversarial machine learning},
  url =          {https://www.ece.cmu.edu/~lbauer/papers/2016/ccs2016-face-recognition.pdf},
  doi =          {10.1145/2976749.2978392},
  keywords =     {adversarial ML},
}