Imported from https://github.com/mattroos/null_class_adversarial_defense