Multiple classifier systems under attack