Venue: ICML 2021 Workshop AML

Reviews:

final_score: rating: Accept
review_content: This work is strict and well formulated in math, though some sentences are too long to follow.

The novelty of this paper is (1) discovering the ineffectiveness of weight decay regularizer (2) proposing a novel regularizer to regularize the intrinsic norms of  the network which is invariant to shifting of weight scales between layers.

Experiments are exhausted to demonstrate the effectiveness of WEISSI. It works for different attack methods and datasets.

The paper is too crowded: the margin below section 3. 4. 5. is too narrow, and there is no space for Conclusion section.
review_title: a work with good insight into the ineffectiveness of weight decay regularizer and proposing a novel regularizer to regularize the intrinsic norms of  the network.

Meta-review: This paper proposes a novel regularizer to regularize the intrinsic norms of network. Experiments demonstrate the effectiveness for different attack methods and datasets. 
Decision: Accept (Poster)