Adversarial Robustness via Runtime Masking and Cleansing