From: ICML.cc/2021/Workshop/AML/Program_Chairs
title: Paper Decision
decision: Accept (Oral)
comment: A good paper for certifying robustness against patch attacks. The idea of randomized cropping is a natural extension of randomized smoothing.

From: ICML.cc/2021/Workshop/AML/Paper26/Reviewer_J8hY
title: A novel idea for improving certified robustness against patch attacks
review: This paper proposed an interesting idea that patch attacks can be certifiably defended by random cropping. The idea of randomized cropping comes from that randomized smoothing is an effective way for l-2 attacks. The author generalized the idea to patch attacks that only modify certain pixels. Both the theoretical and experimental results are effective.
rating: Accept
confidence: 4: The reviewer is confident but not absolutely certain that the evaluation is correct