Fetching the paper…

Adversarial Robustness: Softmax versus Openmax · Around