Quantifying the Noise of Structural Perturbations on Graph Adversarial Attacks