sentence1: in 2005 , lowd and meek proposed the concept of adversarial learning , in which an adversary conducts an attack to minimize a cost function .
sentence2: lowd and meek described an efficient attack by which an adversary can reverseengineer the weights of a linear classifier , in order to then generate adversarial inputs .