Topological Effects on Attacks Against Vertex Classification