Improving adversarial robustness of medical imaging systems via adding global attention noise