A multiple instance learning strategy for combating adversarial good word attacks on statistical spam filters