Paragraph: Thwarting Signature Learning by Training Maliciously
Adversarial classification