From: ICML.cc/2021/Workshop/AML/Program_Chairs
title: Paper Decision
decision: Accept (Oral)
comment: A good work considering robust classification and robust detection, as agreed by the reviewer. This paper could be significant to the workshop.

From: ICML.cc/2021/Workshop/AML/Paper67/Reviewer_pfiE
title: Interesting work
review: This is good work connecting the areas of robust classifying and robust detection, especially in the cases that the evaluations against detection methods are usually under-explored, compared to those against classifying methods. The construction of equivalent classifiers and detectors in Theorem 4 and 5 are elegant.

Connecting classification with detection/rejection modules is an intriguing topic. A concurrent work [1] also compares the learning difficulties between a robust classifier and a robust detector (w.r.t. number of classes), where an easier-to-learned rejection module can be coupled with the classifier.

I think the conclusions in the submitted paper can provide beneficial insights for the community, and avoid overclaims in future detection papers.

[1] Adversarial Training with Rectified Rejection. arXiv 2105.14785
rating: Accept
confidence: 5: The reviewer is absolutely certain that the evaluation is correct and very familiar with the relevant literature