Venue: AAAI 2022 Workshop AdvML

Reviews:

final_score: rating: 7: Good paper, accept
review_content: This paper proposes an SVD-based metric to measure the adversarial transferability between models, based on which the authors further develop an ensemble-based defense, which outperforms previous baselines.

There are some suggestions for extending this paper to a full version:
1. Include AutoAttack in evaluation, which is the most commonly used benchmark attack right now.
2. Polish the format of equations, e.g., Equation (4) where the subscript is not correctly compiled.
3. Figure 1 is informative but is a little bit dazzled to parse.
review_title: Review of Paper 14

Meta-review: The reviewer agrees to accept this paper. Please address the reviewer's comment in the camera-ready version.
Decision: Accept (Short Paper)