sentence1: work on adversarial examples has shown that neural networks are vulnerable to the attacks perturbing the data in imperceptible ways .
sentence2: deep neural networks are vulnerable to adversarial attacks , in which , given a trained model , inputs can be modified in subtle ways , to produce an incorrect output .