To Reviewer # 1 attack suffices to detect some useful information of the training dataset and can validate the relationship between the