Experiment 2: Relationship between |S| and FPR & FNR (adv_a=i_FGSM, LPs=1, y/y'=y)
FPR & FNR of adversarial detection with h=1 (|S|={500,1500,3000})
FPR & FNR of adversarial detection with h=2 (|S|={500,1500,3000})
FPR & FNR of adversarial detection with h=3 (|S|={500,1500,3000})
FPR & FNR of adversarial detection with h=4 (|S|={500,1500,3000})
