In other words, malicious attackers can destroy the models by adding a few inconspicuous perturbations into input data, such as masking images with unrecognizable filters and making low-key modifications for texts.
developing techniques to equip models against adversarial attacks becomes a prominent research problem.