Fig. 1From: Feature partitioning for robust tree ensembles and their certification in adversarial scenariosAccuracy lower bounds for large b with f-FPFBack to article page