From: ICML.cc/2021/Workshop/AML/Program_Chairs
title: Paper Decision
decision: Accept (Oral)
comment: A good paper that defends against model stealing attacks by leveraging external features. The paper is well-written. Please address the reviewer's comment in the final version.

From: ICML.cc/2021/Workshop/AML/Paper8/Reviewer_XMuR
title: Review
review: This paper proposes to defend against model stealing attacks by embedding external features (via style transfer) into the victim model. A meta-classifier is then trained to determine whether a  suspicious model contains the external features.

This paper is written clearly that discusses the shortcomings of existing techniques. The proposed method seems to be well-motivated and effective. One thing that I did not quite understand is why the suspicious model can learn the external features of the victim model? Does is depend on model stealing attack methods?
rating: Accept
confidence: 4: The reviewer is confident but not absolutely certain that the evaluation is correct