sentence1: however , recent studies showed that neural networks are vulnerable to adversarial examples , and attackers can design maliciously perturbed inputs to mislead a model at the test phase .
sentence2: however , people recently find that deep neural networks could be vulnerable to adversarial attacks , which arouses concerns of applying deep learning in security-critical tasks .