Adversarial Robustness: Softmax versus Openmax
Adversarial Machine Learning at Scale