From: Feature partitioning for robust tree ensembles and their certification in adversarial scenarios
Method | k=1 | k=2 | k=3 | |||
---|---|---|---|---|---|---|
BF | 263.6 ms | 1053.4 ms | 3635 s | |||
Cascading | 27.1 ms | 166.0 ms | 36 s | |||
breakdown: | ||||||
–FLB | 2.7 ms | (100%) | 3.2 ms | (100%) | 3.3 ms | (100%) |
–ELB | 0.8 ms | (2%) | 2.0 ms | (8%) | 29.7 ms | (20%) |
–BF | 23.6 ms | (2%) | 160.8 ms | (7%) | 36 s | (18%) |