Before revision:  Such attack patterns are further validated by the experimental results on  real-world networks, i.e., generally the top 4 most important network attributes on detecting adversarial samples are sufficient to explain the preference of each attack method.
After revision:  Such attack pattern are further verified by experimental results on real-world networks, i.e., generally the top 4 most important network attributes on detecting adversarial samples are sufficient to explain the preference of each attack method.