The Relationship Between Network Similarity and Transferability of Adversarial Attacks