Benchmarking Neural Network Robustness to Common Corruptions and Perturbations