Symmetry Subgroup Defense Against Adversarial Attacks