A Knowledge-guided Adversarial Defense for Resisting Malicious Visual Manipulation