An Incremental Gray-box Physical Adversarial Attack on Neural Network Training