Evaluating the robustness of adversarial defenses in malware detection systems