Not with a Bug, But With a Sticker : Attacks on Machine Learning Systems and What to Do About Them

Ram Shankar Siva Kumar, Hyrum Anderson