sentence1: several optimization-based methods have been proposed for generating adversarial examples , including fast gradient sign method , and carlini and wagner attack .
sentence2: two popular attack algorithms , namely , fast gradient sign method and the carlini and wagner attack are used to generate adversarial examples .