Venue: AAAI 2022 Workshop AdvML

Reviews:

final_score: rating: 6: Marginally above acceptance threshold
review_content: Pros:
1. The paper is easy to follow.
2. Utilization of patch vestiges in vision transformer is a new perspective to develop defense models
Cons:
1. The experiments are too simple. More comparisons should be added to comprehensively exhibit the advantages of this method.
2. To demonstrate the generality of the patch vestiges in adversarial perturbations, more adversarial attack methods should be considered.
review_title: A good research to discriminate adversarial perturbations between ResNet and transformer.

Meta-review: The reviewer agrees to accept this paper. 
Decision: Accept (Short Paper)