How to confuse antimalware neural networks. Adversarial attacks and protection