Generating Poisoning Attacks against Ridge Regression Models with Categorical Features