Defending against Universal Adversarial Patches by Clipping Feature Norms | IEEE Conference Publication | IEEE Xplore