AI Security: Metrics, Adversarial Defence, and Strategy