Protecting neural networks from adversarial attacks, i think you mean. Protecting good A.I. from spoofing attacks is exactly the same as protecting human drivers from spoofing attacks.