sentence1: in this work , we employ the pgd attack since it can generate universal adversary examples among the first order approaches .
sentence2: in this paper we apply a standard algorithm called pgd-attack to generate adversarial examples .