Adversarial Attack Generation Empowered by Min-Max Optimization