Venue: ICML 2021 Workshop AML

Reviews:

final_score: rating: Accept
review_content: An adversary wants to attack a limited number of images within a stream of known length to reduce the exposure risk. Also, the adversary wants to maximize the success rate of attacks. This work proposes a criteria algorithm to choose a limited number of images to attack.

Pros: The problem formulation is reasonable. The proposed selection criteria is reasonable.

Cons: More details about your proposed method should be included in the abstract. The writing should be improved.
review_title: This work proposes a criteria algorithm to choose a limited number of images from a stream to attack.

Meta-review: This paper proposed a criteria algorithm to choose a limited number of images to attack. The writing can be improved.
Decision: Accept (Poster)