Familiarity-Based Open-Set Recognition Under Adversarial Attacks