Property Inference Attacks on Fully Connected Neural Networks using Permutation Invariant Representations
Practical Black-Box Attacks against Machine Learning