Towards Understanding and Improving the Transferability of Adversarial Examples in Deep Neural Networks