Venue: ICML 2021 Workshop AML

Reviews:

final_score: rating: Accept
review_content: This paper shows the vulnerability of NAS algorithms, especially in the search space and controller design. 

pros:
1. The paper is easy to follow.
2. The idea to poison the search space of NAS is interesting.
3. The pointed weakness of NAS algorithms is worthy to study.

cons:
1. The experiments are not strong. No comparison with former methods.
2. The proposed search space poison instances, Identity, Transposed Convolutions and Dropout Layer, are too limited.
review_title: A NAS-targeted search space poison attack. Lack of comparing methods to valid its superiority.

Meta-review: This paper showed the vulnerability of NAS algorithms in the search space and controller design. The authors can further address the reviewer's comments.
Decision: Accept (Poster)