Nicholas Papernot [1] et al. has shown how this can be an attack on an unknown network provided you have access to inference results produced by the target net

Nicholas Papernot [1] et al. has shown how this can be an attack on an unknown network provided you have access to inference results produced by the target network [2]. [1] https://www.papernot.fr/ https://www.papernot.fr/ [2] https://arxiv.org/abs/1602.02697 https://arxiv.org/abs/1602.02697