sentence1: kurakin et al proposed basic iterative method to generate adversarial examples , which add little perturbation in each step .
sentence2: kurakin et al applied adversarial examples to the physical world by extending the fgsm algorithm by running a finer optimization for multiple iterations .