Minimax rates of convergence for nonparametric regression under adversarial attacks