Approaches to adversarial drift
Good Word Attacks on Statistical Spam Filters