Adversarial Multiclass Classification: A Risk Minimization Perspective