Understanding Spatial Robustness of Deep Neural Networks