sentence1: unluckily , deep networks for image classification tasks were proved to be sensitive to adversarial examples , which were generated by adding small perturbations using gradient methods on purpose .
sentence2: deep networks were shown to be susceptible to adversarial samples , generated by introducing carefully chosen perturbations to the input .