adversarial example outline regular icon