What Does the Gradient Tell When Attacking the Graph Structure