Fig. 3From: Feature partitioning for robust tree ensembles and their certification in adversarial scenariosExpected accuracyBack to article page