Systems, apparatuses, and methods are directed towards identifying that an adversarial patch image includes a plurality of pixels. The systems, apparatuses, and methods include dividing the adversarial patch image into a plurality of blocks, that each include a different group of the pixels in which the pixels are contiguous to each other, and assigning a first plurality of colors to the plurality of blocks to assign only one of the first plurality of colors to each pixel of one of the plurality of blocks.