point_process_adversarial_attack