From: ICML.cc/2021/Workshop/AML/Program_Chairs
title: Paper Decision
decision: Accept (Poster)
comment: This paper proposed a targeted black-box attack method with better transferability. The improvements are significant.

From: ICML.cc/2021/Workshop/AML/Paper4/Reviewer_t82W
title: Review for generative targeted attack
review: This paper analyzes targeted blackbox attack using generative models. The method utilizes a endocer-decoder network while combining a class-conditioned vector with the encoder feature as the latent vector. Authors also adapt two methods to improve the transferability. Plenty of experiments are conducted against both natual trained models and adversarially trained models. The proposed method outperforms baseline method by a significant margin.

There are some quesitions unclear for me:
1. What is the motivation to design such a model? 
2. The ablation study should be conducted to demonstrate the effect of the two methods.

In summary, this paper propose an effective method to improve targeted black-box attack. It would make contributions to the workshop.
rating: Accept
confidence: 5: The reviewer is absolutely certain that the evaluation is correct and very familiar with the relevant literature