A principled approach for generating adversarial images under non-smooth dissimilarity metrics