human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "mockingbird defending against deep learning based website fingerprinting attacks with adversarial traces"):
  Abstract: Website Fingerprinting (WF) is a type of traffic analysis attack that enables a local passive eavesdropper to infer the victim's activity even when the traffic is protected by encryption, a VPN, or an anonymity system like Tor. Leveraging a deep-learning classifier, a WF attacker can gain over 98% accuracy on Tor traffic. Existing WF defenses are either very expensive in terms of bandwidth and latency overheads (e.g. two-to-three times as large or slow) or ineffective against the latest attacks. In this paper, we explore a novel defense, Mockingbird, based on the idea of adversarial examples that have been shown to undermine machine-learning classifiers in other domains. Since the attacker gets to design his classifier based on the defense design, we first demonstrate that at least one technique for generating adversarial-example based traces fails to protect against an attacker using adversarial training for robust classification. We then propose Mockingbird, a technique for generating traces that resists adversarial training by moving randomly in the space of viable traces and not following more predictable gradients. The technique drops the accuracy of the state-of-the-art attack hardened with adversarial training from 98% to as low as 29% while incurring only 56% bandwidth overhead. The attack accuracy is generally lower than state-of-the-art defenses, and much lower when considering Top-2 accuracy, while incurring lower overheads in most settings.

Includes members:
  Member "var cnn a data efficient website fingerprinting attack based on deep learning":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "tik tok the utility of packet timing in website fingerprinting attacks")
  Member "measuring information leakage in website fingerprinting attacks and defenses":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "adv dwf defending against deep learning based website fingerprinting attacks with adversarial traces")
  Member "tik tok the utility of packet timing in website fingerprinting attacks":
    also connected through other hyperedges:
      (none)
  Member "deep fingerprinting undermining website fingerprinting defenses with deep learning":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "blind adversarial network perturbations")
  Member "automated website fingerprinting through deep learning":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "blind adversarial network perturbations")
  Member "certified defenses against adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "overfitting in adversarially robust deep learning")
  Member "obfuscated gradients give a false sense of security circumventing defenses to adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "adversarial ranking attack and defense")
  Member "adversarial examples are not easily detected bypassing ten detection methods":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "secure and robust machine learning for healthcare a survey")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)