Attack-resilient state estimation for noisy dynamical systems