human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "spatial aware online adversarial perturbations against visual object tracking"):
  Abstract: Adversarial attacks of deep neural networks have been intensively studied on image, audio, natural language, patch, and pixel classification tasks. Nevertheless, as a typical, while important real-world application, the adversarial attacks of online video object tracking that traces an object's moving trajectory instead of its category are rarely explored. In this paper, we identify a new task for the adversarial attack to visual object tracking: online generating imperceptible perturbations that mislead trackers along an incorrect (Untargeted Attack, UA) or specified trajectory (Targeted Attack, TA). To this end, we first propose a spatial-aware basic attack by adapting existing attack methods, i.e., FGSM, BIM, and C\&W, and comprehensively analyze the attacking performance. We identify that online object tracking poses two new challenges: 1) it is difficult to generate imperceptible perturbations that can transfer across time/frames, and 2) real-time trackers require the attack to satisfy a certain level of efficiency. To address these challenges, we further propose the online incremental attack (OIA) that performs spatial-temporal sparse incremental perturbations online and makes the adversarial attack less perceptible. In addition, as an optimization-based method, OIA quickly converges to very small losses within several iterations by considering historical incremental perturbations, making it much more efficient than the basic attacks. The in-depth evaluation on the state-of-the-art trackers (i.e., SiamRPN with Alex, MobileNetv2, and ResNet-50) for OTB100 and VOT2018 demonstrates the effectiveness and transferability of OIA in misleading existing trackers under both UA and TA with minor perturbations.

Includes members:
  Member "physical adversarial textures that fool visual object tracking":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "spark spatial aware online incremental attack against visual tracking")
  Member "deeper and wider siamese networks for real time visual tracking":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "siamese attentional keypoint network for high performance visual tracking")
  Member "is bert really robust a strong baseline for natural language attack on text classification and entailment":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "gradient based adversarial attacks on categorical sequence models via traversing an embedded world")
  Member "robust adversarial perturbation on deep proposal based models":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "category wise attack transferable adversarial examples for anchor free object detection")
  Member "siamese cascaded region proposal networks for real time visual tracking":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "siamese box adaptive network for visual tracking")
  Member "seeing isn t believing practical adversarial attack against object detectors":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "spark spatial aware online incremental attack against visual tracking")
  Member "distractor aware siamese networks for visual object tracking":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "siamese attentional keypoint network for high performance visual tracking")
  Member "black box generation of adversarial text sequences to evade deep learning classifiers":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "humpty dumpty controlling word meanings via corpus poisoning")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)