human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "procedural noise adversarial examples for black box attacks on deep convolutional networks"):
  Abstract: Deep Convolutional Networks (DCNs) have been shown to be vulnerable to adversarial examples---perturbed inputs specifically designed to produce intentional errors in the learning algorithms at test time. Existing input-agnostic adversarial perturbations exhibit interesting visual patterns that are currently unexplained. In this paper, we introduce a structured approach for generating Universal Adversarial Perturbations (UAPs) with procedural noise functions. Our approach unveils the systemic vulnerability of popular DCN models like Inception v3 and YOLO v3, with single noise patterns able to fool a model on up to 90% of the dataset. Procedural noise allows us to generate a distribution of UAPs with high universal evasion rates using only a few parameters. Additionally, we propose Bayesian optimization to efficiently learn procedural noise parameters to construct inexpensive untargeted black-box attacks. We demonstrate that it can achieve an average of less than 10 queries per successful attack, a 100-fold improvement on existing methods. We further motivate the use of input-agnostic defences to increase the stability of models to adversarial perturbations. The universality of our attacks suggests that DCN models may be sensitive to aggregations of low-level class-agnostic features. These findings give insight on the nature of some universal adversarial perturbations and how they could be generated in other applications.

Includes members:
  Member "on evaluating adversarial robustness":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "anomalous instance detection in deep learning a survey")
  Member "spatially transformed adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "adversarial ranking attack and defense")
  Member "yolov3 an incremental improvement":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "perception and decision making of autonomous systems in the era of learning an overview")
  Member "imagenet trained cnns are biased towards texture increasing shape bias improves accuracy and robustness":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "on feature normalization and data augmentation")
  Member "generating adversarial examples with adversarial networks":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "category wise attack transferable adversarial examples for anchor free object detection")
  Member "sok security and privacy in machine learning":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "secure and robust machine learning for healthcare a survey")
  Member "defense against the dark arts an overview of adversarial example security research and future research directions":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "semantic adversarial attacks parametric transformations that fool deep classifiers")
  Member "audio adversarial examples targeted attacks on speech to text":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "advbox a toolbox to generate adversarial examples that fool neural networks")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)