human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "enhancing ml robustness using physical world constraints"):
  Abstract: Recent advances in Machine Learning (ML) have demonstrated that neural networks can exceed human performance in many tasks. While generalizing well over natural inputs, neural networks are vulnerable to adversarial inputs -an input that is ``similar'' to the original input, but misclassified by the model. #R##N#Existing defenses focus on Lp-norm bounded adversaries that perturb ML inputs in the digital space. In the real world, however, attackers can generate adversarial perturbations that have a large Lp-norm in the digital space. Additionally, these defenses also come at a cost to accuracy, making their applicability questionable in the real world. #R##N#To defend models against such a powerful adversary, we leverage one constraint on its power: the perturbation should not change the human's perception of the physical information; the physical world places some constraints on the space of possible attacks. Two questions follow: how to extract and model these constraints? and how to design a classification paradigm that leverages these constraints to improve robustness accuracy trade-off? #R##N#We observe that an ML model is typically a part of a larger system with access to different input modalities. Utilizing these modalities, we introduce invariants that limit the attacker's action space. We design a hierarchical classification paradigm that enforces these invariants at inference time. #R##N#As a case study, we implement and evaluate our proposal in the context of the real-world application of road sign classification because of its applicability to autonomous driving. With access to different input modalities, such as LiDAR, camera, and location we show how to extract invariants and develop a hierarchical classifier. Our results on the KITTI and GTSRB datasets show that we can improve the robustness against physical attacks at minimal harm to accuracy.

Includes members:
  Member "extending adversarial attacks and defenses to deep 3d point cloud classifiers":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "rearchitecting classification frameworks for increased robustness")
  Member "robust audio adversarial example for a physical attack":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "advbox a toolbox to generate adversarial examples that fool neural networks")
  Member "exploiting excessive invariance caused by norm bounded adversarial robustness":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "on adaptive attacks to adversarial example defenses")
  Member "on evaluating adversarial robustness":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "anomalous instance detection in deep learning a survey")
  Member "designing adversarially resilient classifiers using resilient feature engineering":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "adversarial security attacks and perturbations on machine learning and deep learning methods")
  Member "yolov3 an incremental improvement":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "perception and decision making of autonomous systems in the era of learning an overview")
  Member "generating 3d adversarial point clouds":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "review deep learning on 3d point clouds")
  Member "adversarial generative nets neural network attacks on state of the art face recognition":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "adversarial machine learning industry perspectives")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)