Before revision:  However, this analysis ignores the dependence of adversarial attacks on  parameters.
After revision:  However, this analysis ignores the dependence of adversarial attacks on model parameters.