Open Set Learning with Counterfactual Images
Adversarial Robustness: Softmax versus Openmax