Vanilla Tree Inference Phase Attack

Element

All (or most) Ka, Kv pairs (by tremendous API invoke) set of labels auxiliary dataset

Attack Alg

heuristic building tree verify on aux dataset small local train to assist position set