Richárd Kiss DEFENCE AGAINST ADVERSARIAL ATTACKS BY EXTENDING CLASS LABEL SET