human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "can you really backdoor federated learning"):
  Abstract: The decentralized nature of federated learning makes detecting and defending against adversarial attacks a challenging task. This paper focuses on backdoor attacks in the federated learning setting, where the goal of the adversary is to reduce the performance of the model on targeted tasks while maintaining good performance on the main task. Unlike existing works, we allow non-malicious clients to have correctly labeled samples from the targeted tasks. We conduct a comprehensive study of backdoor attacks and defenses for the EMNIST dataset, a real-life, user-partitioned, and non-iid dataset. We observe that in the absence of defenses, the performance of the attack largely depends on the fraction of adversaries present and the "complexity'' of the targeted task. Moreover, we show that norm clipping and "weak'' differential privacy mitigate the attacks without hurting the overall performance. We have implemented the attacks and defenses in TensorFlow Federated (TFF), a TensorFlow framework for federated learning. In open-sourcing our code, our goal is to encourage researchers to contribute new attacks and defenses and evaluate them on standard federated datasets.

Includes members:
  Member "data poisoning against differentially private learners attacks and defenses":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "on the effectiveness of mitigating data poisoning attacks with gradient shaping")
  Member "analyzing federated learning through an adversarial lens":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "learning home crowdsourced training of large neural networks using decentralized mixture of experts")
  Member "fine pruning defending against backdooring attacks on deep neural networks":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "entangled watermarks as a defense against model extraction")
  Member "learning with bad training data via iterative trimmed loss minimization":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "dividemix learning with noisy labels as semi supervised learning")
  Member "leaf a benchmark for federated settings":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "think locally act globally federated learning with local and global representations")
  Member "sever a robust meta algorithm for stochastic optimization":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "on the effectiveness of mitigating data poisoning attacks with gradient shaping")
  Member "backdoor embedding in convolutional neural network models via invisible perturbation":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "rab provable robustness against backdoor attacks")
  Member "spectral signatures in backdoor attacks":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "vulnerabilities of connectionist ai applications evaluation and defence")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)