 The active attack involved adding random words to a small spam and using a web bug to determine whether the spam was received.If it was, another Bayesian system was trained using the same poison words.After sending 10,000 spams to a single user he determined a small set of words that could be used to get a spam through.