human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "model watermarking for image processing networks"):
  Abstract: Deep learning has achieved tremendous success in numerous industrial applications. As training a good model often needs massive high-quality data and computation resources, the learned models often have significant business values. However, these valuable deep models are exposed to a huge risk of infringements. For example, if the attacker has the full information of one target model including the network structure and weights, the model can be easily finetuned on new datasets. Even if the attacker can only access the output of the target model, he/she can still train another similar surrogate model by generating a large scale of input-output training pairs. How to protect the intellectual property of deep models is a very important but seriously under-researched problem. There are a few recent attempts at classification network protection only. In this paper, we propose the first model watermarking framework for protecting image processing models. To achieve this goal, we leverage the spatial invisible watermarking mechanism. Specifically, given a black-box target model, a unified and invisible watermark is hidden into its outputs, which can be regarded as a special task-agnostic barrier. In this way, when the attacker trains one surrogate model by using the input-output pairs of the target model, the hidden watermark will be learned and extracted afterward. To enable watermarks from binary bits to high-resolution images, both traditional and deep spatial invisible watermarking mechanism are considered. Experiments demonstrate the robustness of the proposed watermarking mechanism, which can resist surrogate models learned with different network structures and objective functions. Besides deep models, the proposed method is also easy to be extended to protect data and traditional image processing algorithms.

Includes members:
  Member "stegastamp invisible hyperlinks in physical photographs":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "distortion agnostic deep watermarking")
  Member "digital watermarking for deep neural networks":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "entangled watermarks as a defense against model extraction")
  Member "turning your weakness into a strength watermarking deep neural networks by backdooring":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "entangled watermarks as a defense against model extraction")
  Member "density aware single image de raining using a multi stream dense network":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "cooperative semantic segmentation and image restoration in adverse environmental conditions")
  Member "hidden hiding data with deep networks":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "distortion agnostic deep watermarking")
  Member "attention is all you need":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "using a thousand optimization tasks to learn hyperparameter search strategies")
  Member "chestx ray8 hospital scale chest x ray database and benchmarks on weakly supervised classification and localization of common thorax diseases":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "the future of digital health with federated learning")
  Member "embedding watermarks into deep neural networks":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "dlbc a deep learning based consensus in blockchains for deep learning services")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.MM(Multimedia)