How to protect AI systems against image-scaling attacks