Is data clustering in adversarial settings secure?
feature weighting for improved classifier robustness .