Topology-Preserving Adversarial Training