sentence1: despite the spectacular performance , szegedy et al showed that a small perturbation in the input domain can fool a trained classifier into making a wrong prediction confidently .
sentence2: however , szegedy et al found an interesting fact that a crafted input with small perturbations could easily fool dnn models .