How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?