Bagging classifiers for fighting poisoning attacks in adversarial classification tasks