sentence1: adversarial examples are carefully manipulated inputs that appear natural to humans but cause deep models to misbehave .
sentence2: adversarial examples are inputs to a neural network that are designed to force misclassification .