We tested ALISA separately for these cases, and found that ALISA could successfully dedect these attack scenarios.