Formulation of Adversarial ML