D. Vos and S. Verwer, “Robust Optimal Classification Trees against Adversarial Examples”, AAAI, vol. 36, no. 8, pp. 8520-8528, Jun. 2022.