Which of the following BEST describes an adversarial attack on an AI model?

In AAISM, an adversarial attack is defined by maliciously crafted inputs designed to cause erroneous model behavior (misclassification, targeted misprediction) while the model architecture and parameters remain unchanged. Hardware compromise (A) and DoS (D) are system-level attacks, not adversarial ML per se. Social engineering to obtain model information (C) is an information-gathering or security breach vector, distinct from input-space adversarial manipulation.