Venue: ICML 2021 Workshop AML

Reviews:

final_score: rating: Accept
review_content: This paper proposes to defend against model stealing attacks by embedding external features (via style transfer) into the victim model. A meta-classifier is then trained to determine whether a  suspicious model contains the external features.

This paper is written clearly that discusses the shortcomings of existing techniques. The proposed method seems to be well-motivated and effective. One thing that I did not quite understand is why the suspicious model can learn the external features of the victim model? Does is depend on model stealing attack methods?
review_title: Review

Meta-review: A good paper that defends against model stealing attacks by leveraging external features. The paper is well-written. Please address the reviewer's comment in the final version.
Decision: Accept (Oral)