Before revision:  For integrity we find that the attacker can either stop the model from learning, or poison it to learn behaviours specified by the attacker.
After revision:  For integrity we find that the attacker can either prevent the model from learning, or poison it to learn behaviours specified by the attacker.