RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations