I've also been interested in using adversarial examples in extracting sensitive info from models. Both extracting unique info from the training set (doesn't see

I've also been interested in using adversarial examples in extracting sensitive info from models. Both extracting unique info from the training set (doesn't seem feasible but I can't prove it) or doing a "forced knowledge transfer" when a competitor has a well trained model and you don't.