ff1418e8cc993fe8abcfe3ce2003e5c5-AuthorFeedback.pdf

Below we clarify each question and we hope reviewers can raise their scores based on the responses. L205), we have provided the detailed experiment settings. The default ratio value is 50%, i.e., train 1 iteration passport-aware branch after training every 1 iteration In this case, the theoretical computation cost will be 2x. More importantly, this will not introduce any extra cost for deployment . Then it can be viewed as a special case (i.e., only the nonlinear transform We adopt a similar setting as the trigger-set based method [10].