Before revision:  We then discuss why existing defenses against poisoning attacks  are largely ineffective , and suggest alternative mitigations .
After revision:  We then evaluate existing defenses against poisoning attacks are largely ineffective , and suggest alternative mitigations .