Proving Robustness of KNN Against Adversarial Data Poisoning