You don't need access to the network, you can just build another one. https://arxiv.org/abs/1602.02697 https://arxiv.org/abs/1602.02697 "Our attack strategy c

You don't need access to the network, you can just build another one. https://arxiv.org/abs/1602.02697 https://arxiv.org/abs/1602.02697 "Our attack strategy consists in training a local model to substitute for the target DNN, using inputs synthetically generated by an adversary and labeled by the target DNN"