Evaluating Methods for Improving DNN Robustness Against Adversarial Attacks