We learn that a number of factors can influence the performance of adversarial attacks, including architecture of the classifier, sentence length and input domain. 
 Question: What other factors affect the performance?
architecture of the classifier sentence length  input domain