sentence1: previous work discovered that many machine learning models , including modern neural network architectures , are vulnerable to adversarial examples .
sentence2: it has previously been shown that adversarial examples may be shared across different machine learning models .