Deterministic versus stochastic dynamical classifiers: opposing random adversarial attacks with noise