Active Subspace of Neural Networks: Structural Analysis and Universal Attacks