Property Inference Attacks on Fully Connected Neural Networks using Permutation Invariant Representations
Stealing Machine Learning Models via Prediction APIs