Spectral Signatures in Backdoor Attacks