Collective decision for open set recognition
Adversarial Robustness: Softmax versus Openmax