adversarial_registration_attack