In the literature, this type of attack strategy is categorized as untargeted attack in which the adversary is counted as successful if, for instance, a dog image is pre- dicted as anything other than a dog. We assumed that the adversary has complete knowledge about the model archi- tecture...
FIG. 3. Description of immunogen and experimental strategy. 3a) Design of the fentanyl vaccine that was used to immunize mice. The immunogen is composed of tetanus toxoid (TT) carrier protein conjugated to the para-AmFenHap hapten through the NHS-PEG2-maleimide linker. 3b) Experimental ...