human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "defective convolutional layers learn robust cnns"):
  Abstract: Robustness of convolutional neural networks has recently been highlighted by the adversarial examples, i.e., inputs added with well-designed perturbations which are imperceptible to humans but can cause the network to give incorrect outputs. Recent research suggests that the noises in adversarial examples break the textural structure, which eventually leads to wrong predictions by convolutional neural networks. To help a convolutional neural network make predictions relying less on textural information, we propose defective convolutional layers which contain defective neurons whose activations are set to be a constant function. As the defective neurons contain no information and are far different from the standard neurons in its spatial neighborhood, the textural features cannot be accurately extracted and the model has to seek for other features for classification, such as the shape. We first show that predictions made by the defective CNN are less dependent on textural information, but more on shape information, and further find that adversarial examples generated by the defective CNN appear to have semantic shapes. Experimental results demonstrate the defective CNN has higher defense ability than the standard CNN against various types of attack. In particular, it achieves state-of-the-art performance against transfer-based attacks without applying any adversarial training.

Includes members:
  Member "adversarial examples are a natural consequence of test error in noise":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "affinity and diversity quantifying mechanisms of data augmentation")
  Member "dropping pixels for adversarial robustness":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "robustness certificates for sparse adversarial attacks by randomized ablation")
  Member "adversarial defense by stratified convolutional sparse coding":
    also connected through other hyperedges:
      (none)
  Member "dropblock a regularization method for convolutional networks":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "on feature normalization and data augmentation")
  Member "imagenet trained cnns are biased towards texture increasing shape bias improves accuracy and robustness":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "on feature normalization and data augmentation")
  Member "defense gan protecting classifiers against adversarial attacks using generative models":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "secure and robust machine learning for healthcare a survey")
  Member "analyzing the noise robustness of deep neural networks":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "explainer a visual analytics framework for interactive and explainable machine learning")
  Member "sok security and privacy in machine learning":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "secure and robust machine learning for healthcare a survey")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)