Adversarial flows: A gradient flow characterization of adversarial attacks