Defending Against Adversarial Malware