Besides a fooling attack is there other kinds of attacks that can be used against an image classifiers? Specifically in regards to self driving cars, as there are higher risks when it comes to failures. What can we do to prevent these attacks from happening in the future?