Defending Neural Networks Against Adversarial Examples