He helped build automated defenses for APIs. Now Dr. Doron Chema is asking a harder question: how do you protect an AI system that changes while it works?