A Appendices A.1 Additional Experiment Results

Neural Information Processing Systems 

The original digits are randomly sampled from the test set. Figures are best viewed when zoomed. On FashionMNIST -bags, TargetedMI makes some mistakes among the'pullover', 'coat', and'shirt' objects (the 3rd, 5th, and 7th columns). Let us look at the bottom subfigure which depicts 10 hiragana characters and their handwriting. Figures are best viewed when zoomed.