Towards Fair Classification against Poisoning Attacks