human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "advms a multi source multi cost defense against adversarial attacks"):
  Abstract: Designing effective defense against adversarial attacks is a crucial topic as deep neural networks have been proliferated rapidly in many security-critical domains such as malware detection and self-driving cars. Conventional defense methods, although shown to be promising, are largely limited by their single-source single-cost nature: The robustness promotion tends to plateau when the defenses are made increasingly stronger while the cost tends to amplify. In this paper, we study principles of designing multi-source and multi-cost schemes where defense performance is boosted from multiple defending components. Based on this motivation, we propose a multi-source and multi-cost defense scheme, Adversarially Trained Model Switching (AdvMS), that inherits advantages from two leading schemes: adversarial training and random model switching. We show that the multi-source nature of AdvMS mitigates the performance plateauing issue and the multi-cost nature enables improving robustness at a flexible and adjustable combination of costs over different factors which can better suit specific restrictions and needs in practice.

Includes members:
  Member "protecting neural networks with hierarchical random switching towards better robustness accuracy trade off for stochastic defenses":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "rtmobile beyond real time mobile acceleration of rnns for speech recognition")
  Member "adversarial t shirt evading person detectors in a physical world":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "advbox a toolbox to generate adversarial examples that fool neural networks")
  Member "defensive dropout for hardening deep neural networks under adversarial attacks":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "towards query efficient black box adversary with zeroth order natural gradient descent")
  Member "breaking transferability of adversarial samples with randomness":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "on the security of randomized defenses against adversarial samples")
  Member "is robustness the cost of accuracy a comprehensive study on the robustness of 18 deep image classification models":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "cat customized adversarial training for improved robustness")
  Member "obfuscated gradients give a false sense of security circumventing defenses to adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "adversarial ranking attack and defense")
  Member "keeping the bad guys out protecting and vaccinating deep learning with jpeg compression":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "adversarial perturbations prevail in the y channel of the ycbcr color space")
  Member "mtdeep boosting the security of deep neural nets against adversarial attacks with moving target defense":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "moving target defense for deep visual sensing against adversarial examples")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)