From: AAAI.org/2022/Workshop/AdvML/Program_Chairs
title: Paper Decision
decision: Accept (Short Paper)
comment: The reviewer agrees to accept this paper. Please address the reviewer's comment in the camera-ready version.

From: AAAI.org/2022/Workshop/AdvML/Paper14/Reviewer_yGxj
title: Review of Paper 14
review: This paper proposes an SVD-based metric to measure the adversarial transferability between models, based on which the authors further develop an ensemble-based defense, which outperforms previous baselines.

There are some suggestions for extending this paper to a full version:
1. Include AutoAttack in evaluation, which is the most commonly used benchmark attack right now.
2. Polish the format of equations, e.g., Equation (4) where the subscript is not correctly compiled.
3. Figure 1 is informative but is a little bit dazzled to parse.
rating: 7: Good paper, accept
confidence: 4: The reviewer is confident but not absolutely certain that the evaluation is correct