sentence1: for example , one may use a mixture of normal and adversarial examples in the training set for data augmentation .
sentence2: this resembles adversarial training , where adversarial examples are added to the training set to improve model robustness .