template-based attacks