Implementation of Spatially Transformed Adversarial Attack