Venue: ICML 2021 Workshop AML

Reviews:

final_score: rating: Accept
review_content: This paper analyzes targeted blackbox attack using generative models. The method utilizes a endocer-decoder network while combining a class-conditioned vector with the encoder feature as the latent vector. Authors also adapt two methods to improve the transferability. Plenty of experiments are conducted against both natual trained models and adversarially trained models. The proposed method outperforms baseline method by a significant margin.

There are some quesitions unclear for me:
1. What is the motivation to design such a model? 
2. The ablation study should be conducted to demonstrate the effect of the two methods.

In summary, this paper propose an effective method to improve targeted black-box attack. It would make contributions to the workshop.
review_title: Review for generative targeted attack

Meta-review: This paper proposed a targeted black-box attack method with better transferability. The improvements are significant.
Decision: Accept (Poster)