add attack function -Gaussian noise