Similarity-driven adversarial testing of neural networks