Input Transformations, Adversarial Detection, and Runtime Monitoring