1 Table of Contents: “... Setting -- 4.3.2 Threat Model -- Targeted Poisoning Attacks -- 4.3.3 AUROR Defense -- 4.3.4 Evaluation...”