AFA: Adversarial fingerprinting authentication for deep neural networks | Litlas