Adversarial Robustness in Parameter-Space Classifiers