An organization deploys an AI-based image recognition system that is vulnerable to evasion attacks. Which of the following approaches BEST helps to ensure the s...