Adversarial Robustness: Softmax versus Openmax
Explaining and Harnessing Adversarial Examples