Learning to Ignore Adversarial Attacks