human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "adversarial sensor attack on lidar based perception in autonomous driving"):
  Abstract: In Autonomous Vehicles (AVs), one fundamental pillar is perception, which leverages sensors like cameras and LiDARs (Light Detection and Ranging) to understand the driving environment. Due to its direct impact on road safety, multiple prior efforts have been made to study its the security of perception systems. In contrast to prior work that concentrates on camera-based perception, in this work we perform the first security study of LiDAR-based perception in AV settings, which is highly important but unexplored. We consider LiDAR spoofing attacks as the threat model and set the attack goal as spoofing obstacles close to the front of a victim AV. We find that blindly applying LiDAR spoofing is insufficient to achieve this goal due to the machine learning-based object detection process. Thus, we then explore the possibility of strategically controlling the spoofed attack to fool the machine learning model. We formulate this task as an optimization problem and design modeling methods for the input perturbation function and the objective function. We also identify the inherent limitations of directly solving the problem using optimization and design an algorithm that combines optimization and global sampling, which improves the attack success rates to around 75%. As a case study to understand the attack impact at the AV driving decision level, we construct and evaluate two attack scenarios that may damage road safety and mobility. We also discuss defense directions at the AV system, sensor, and machine learning model levels.

Includes members:
  Member "spatially transformed adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "adversarial ranking attack and defense")
  Member "commandersong a systematic approach for practical adversarial voice recognition":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "security vetting process of smart home assistant applications a first look and case studies")
  Member "characterizing adversarial subspaces using local intrinsic dimensionality":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "anomalous instance detection in deep learning a survey")
  Member "seq2sick evaluating the robustness of sequence to sequence models with adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "robustness verification for transformers")
  Member "generating 3d adversarial point clouds":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "review deep learning on 3d point clouds")
  Member "characterizing adversarial examples based on spatial consistency information for semantic segmentation":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "anomalous instance detection in deep learning a survey")
  Member "generating adversarial examples with adversarial networks":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "category wise attack transferable adversarial examples for anchor free object detection")
  Member "audio adversarial examples targeted attacks on speech to text":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "advbox a toolbox to generate adversarial examples that fool neural networks")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)