now considers attack dataset also
test