Defending against adversarial attacks by randomized diversification