Wasserstein distributional robustness of neural networks