I am using 4 different models to classify data as normal or attack. I am using unsw nb 15 dataset. The problem is with cleaverhans 3.1 the implementation is a bit tricky because