sentence1: multiple adversarial attacks have been proposed to generate a successful perturbation under different constraints .
sentence2: different methods have been proposed to generate adversarial examples through adding a small perturbation to a legitimate input sample .