human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "ensembles of many diverse weak defenses can be strong defending deep neural networks against adversarial attacks"):
  Abstract: Despite achieving state-of-the-art performance across many domains, machine learning systems are highly vulnerable to subtle adversarial perturbations. Although defense approaches have been proposed in recent years, many have been bypassed by even weak adversarial attacks. An early study~\cite{he2017adversarial} shows that ensembles created by combining multiple weak defenses (i.e., input data transformations) are still weak. We show that it is indeed possible to construct effective ensembles using weak defenses to block adversarial attacks. However, to do so requires a diverse set of such weak defenses. In this work, we propose Athena, an extensible framework for building effective defenses to adversarial attacks against machine learning systems. Here we conducted a comprehensive empirical study to evaluate several realizations of Athena. More specifically, we evaluated the effectiveness of 5 ensemble strategies with a diverse set of many weak defenses that comprise transforming the inputs (e.g., rotation, shifting, noising, denoising, and many more) before feeding them to target deep neural network (DNN) classifiers. We evaluate the effectiveness of the ensembles with adversarial examples generated by 9 various adversaries (i.e., FGSM, CW, etc.) in 4 threat models (i.e., zero-knowledge, black-box, gray-box, white-box) on MNIST. We also explain, via a comprehensive empirical study, why building defenses based on the idea of many diverse weak defenses works, when it is most effective, and what its inherent limitations and overhead are.

Includes members:
  Member "one pixel attack for fooling deep neural networks":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "adversarial ranking attack and defense")
  Member "simple black box adversarial attacks":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "black box smoothing a provable defense for pretrained classifiers")
  Member "on evaluating adversarial robustness":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "anomalous instance detection in deep learning a survey")
  Member "wild patterns ten years after the rise of adversarial machine learning":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "vulnerabilities of connectionist ai applications evaluation and defence")
  Member "why do adversarial attacks transfer explaining transferability of evasion and poisoning attacks":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "fawkes protecting personal privacy against unauthorized deep learning models")
  Member "no need to worry about adversarial examples in object detection in autonomous vehicles":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "adversarial ranking attack and defense")
  Member "enhancing robustness of machine learning systems via data transformations":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "adversarial perturbations prevail in the y channel of the ycbcr color space")
  Member "keeping the bad guys out protecting and vaccinating deep learning with jpeg compression":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "adversarial perturbations prevail in the y channel of the ycbcr color space")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)