medical image; adversarial attack; medical diagnosis model; image segmentation; model robustness; global noise; attention noise