@INPROCEEDINGS{2020-UsenixSec 20-QuiringKleinArpJohnsRieck,
	author = {Erwin Quiring and David Klein and Daniel Arp and Martin Johns and Konrad Rieck},
	title = {{Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning}},
	booktitle = {29th USENIX Security Symposium (Usenix Sec 20)},
	month = {August},
	year = {2020},
}