Abstract: A method for inducing a covert misclassification performed on a non-transitory computer readable medium, the method includes identifying a target position. The method further includes creating a spectral perturbation tensor. The spectral perturbation tensor is configured to shift a projection of an initial spectrum towards the target position. Additionally, the method includes combining the spectral perturbation tensor to the initial spectrum. Further, the method includes classifying the combination of the spectral perturbation tensor and the initial spectrum with an established classifier, thereby designing the spectral perturbation tensor such that the combination is misclassified.