From: ICML.cc/2021/Workshop/AML/Program_Chairs
title: Paper Decision
decision: Accept (Poster)
comment: A good paper in terms of writing, experiments, and techniques, as noted by the reviewer.

From: ICML.cc/2021/Workshop/AML/Paper48/Reviewer_eti6
title: The paper clearly defines the Oracle-Invariant set and the Oracle-Sensitive set. The proposed OA-AT method is an effective defense training algorithm.
review: Pros:
1. The writing is good.
2. The research domain is clearly stated. The difference between Oracle-Invariant set and the Oracle-Sensitive set is clearly stated.
3. Experiments show that the proposed OA-AT is an effective algorithm to train defense model.
4. The experimental results are sufficient.
Cons:
1. Reference format is not standard.
rating: Accept
confidence: 4: The reviewer is confident but not absolutely certain that the evaluation is correct