A Little Is Enough: Circumventing Defenses For Distributed Learning
Poisoning Attacks against Support Vector Machines