https://www.jsylvest.com/blog/2019/06/bart-barrage-of-random-transforms-for-adversarially-robust-defense/