Fig. 2From: Feature partitioning for robust tree ensembles and their certification in adversarial scenariosAccuracy lower bounds for large b with h-FPFBack to article page