However, when subjected to three types of adversarial attacks—Fast Gradient Sign Method, Projected Gradient Descent, and Carlini & Wagner attacks—its accuracy dropped drastically to just 5% ...