Venue: ICML 2021 Workshop AML

Reviews:

final_score: rating: Accept
review_content: The paper considered input transformation based defense method against gray- and black-box attacks and proposed Self-Supervised Iterative Contextual Smoothing (SSICS), which aims to iteratively reconstruct the original discriminative features from the Gaussian-smoothed image in a context-adaptive way. There are three main techinques in SSICS: self-supervised training of FBI-Net, context-to-context smoothing and Combining Gaussian smoothing. The experiments on ImageNet show the effectiveness of SSICS against gray- and black-box attack. However, the novelty is not such remarkable. What’s more, the theoretical guarantee of the robustness of SSICS may be relevant to Random Smoothing since they both use Gaussian Smoothing.
review_title: The paper proposed Self-Supervised Iterative Contextual Smoothing(SSICS), which is an adversarial defense method based on input transformation.

Meta-review: This paper considered input transformation defense against gray- and black-box attacks and proposed Self-Supervised Iterative Contextual Smoothing (SSICS). The techniques are solid and the experiments show the effectiveness.
Decision: Accept (Poster)