Persistent Watermark For Image Classification Neural Networks By Penetrating The Autoencoder | IEEE Conference Publication | IEEE Xplore