Protecting image classification in artificial intelligence