Adversarial Robustness: Softmax versus Openmax
Going deeper with convolutions