Task: Question Answering
Input (English): We learn that a number of factors can influence the performance of adversarial attacks, including architecture of the classifier, sentence length and input domain. 
 Question: What other factors affect the performance?
Output (English): architecture of the classifier sentence length  input domain