Maximal adversarial perturbations for obfuscation: Hiding certain attributes while preserving rest

Open in new window