Explain a scenario where an attacker might use data poisoning on a deep learning model, and propose a mitigation strategy.
