White-Box Adversarial Defense via Self-Supervised Data Estimation