Killing Three Birds with one Gaussian Process: Analyzing Attack Vectors on Classification