This thesis is the study of an alternative method for standard classification problems for neural networks, developed with the purpose of obtaining increased robustness to adversarial perturbations. ??Through the use of an encoder, the system maps its input data to distributions with arbitrarily selected target mean values, inside of a latent space with a dimensionality equal to the number of classes. The hope is that, by enforcing a great a great enough distance among the classes distributions, adversarial attacks will succed less often. ??A prototype of the system was already developed for two classes, authorized and not-authorized, and this document explores the results and methods of a multi-class implementation.