Background: I\'m working on an adversarial detector method which requires to access the outputs from each hidden layer. I loaded a pretrained VGG16 from