Evaluation and Design of Robust Neural Network Defenses