Adversarial Attack Generation Empoweredby Min-Max Optimization