@inproceedings {251570,
	author = {Erwin Quiring and David Klein and Daniel Arp and Martin Johns and Konrad Rieck},
	title = {Adversarial Preprocessing: Understanding and Preventing {Image-Scaling} Attacks in Machine Learning},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1363-1380},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/quiring},
	publisher = {USENIX Association},
	month = aug
}
