Before revision:  We then discuss why existing defenses against poisoning attacks  are largely ineffective , and suggest alternative mitigations .
After revision:  We then discuss why existing defenses against poisoning attacks and show that they are largely ineffective , and suggest alternative mitigations .