Before revision:  However, the number of adversarial examples added by ADA is extremely insufficient due to the enormously large search space.
After revision:  However, the number of adversarial examples added by ADA is extremely insufficient due to the exponentially large attack search space.