On Defending Against Label Flipping Attacks on Malware Detection Systems