Vanilla Tree Inference Phase Attack

Element

• All (or most) Ka, Kv pairs (by tremendous API invoke)
• set of labels
• auxiliary dataset

Attack Alg

• heuristic building tree
• verify on aux dataset
• small local train to assist position set