Enhancing robustness of person detection: A universal defense filter against adversarial patch attacks.