Practical Evasion of a Learning-Based Classifier: A Case Study
Poisoning Attacks against Support Vector Machines