Adversarial Attacks on Neural Networks for Graph Data