Venue: AAAI 2022 Workshop AdvML

Reviews:

final_score: rating: 7: Good paper, accept
review_content: Pros:

1, The math is good, and the equations are clear.

2, The intuition is direct.

3, The paper is easy to follow.

Cons:

1, The number of comparison methods are not enough.

2, It will be better if a pipeline figure is added into the paper, which shows how the defense works.

review_title: An effective voxel-drop-based certified defense method on PointNet.

final_score: rating: 7: Good paper, accept
review_content: This paper proposes a provable defense based on randomized smoothing for certifying robustness against clustering attacks on 3D point clouds.

Strengths:
- The motivation of using the random sampling strategy is clear.
- The theoretical results are provided.
- Some experiments can demonstrate the effectiveness of the method.

I also have some concerns about this work:
- Is it the first work to study provable defenses of 3D classifiers? If not, please discuss with previous work.
- Can you show the certified robustness in experiments?

Overall, I think this work is interesting and makes a contribution to the field. 
review_title: Review of the submission

Meta-review: Both reviewers agree to accept this paper. Please address their comments in the final version.
Decision: Accept (Long Paper)