Trojan Attacks and Defenses on Deep Neural Networks