Visual privacy protection in mobile image recognition using protective perturbation