sentence1: szegedy et al showed that by training on a mixture of adversarial and clean examples , a neural network could be regularized somewhat .
sentence2: szegedy et al demonstrated that despite their superior recognition performance , neural networks are susceptible to adversarial perturbations .