What is the goal of a poisoning attack?

Question $28$ options:

To manipulate the training data

To evade detection

To extract model information

To identify members of a dataset