human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "attacking graph based classification via manipulating the graph structure"):
  Abstract: Graph-based classification methods are widely used for security and privacy analytics. Roughly speaking, graph-based classification methods include collective classification and graph neural network. Evading a graph-based classification method enables an attacker to evade detection in security analytics and can be used as a privacy defense against inference attacks. Existing adversarial machine learning studies mainly focused on machine learning for non-graph data. Only a few recent studies touched adversarial graph-based classification methods. However, they focused on graph neural network methods, leaving adversarial collective classification largely unexplored. We aim to bridge this gap in this work. We first propose a threat model to characterize the attack surface of a collective classification method. Specifically, we characterize an attacker's background knowledge along three dimensions: parameters of the method, training dataset, and the complete graph; an attacker's goal is to evade detection via manipulating the graph structure. We formulate our attack as a graph-based optimization problem, solving which produces the edges that an attacker needs to manipulate to achieve its attack goal. Moreover, we propose several approximation techniques to solve the optimization problem. We evaluate our attacks and compare them with a recent attack designed for graph neural networks. Results show that our attacks 1) can effectively evade graph-based classification methods; 2) do not require access to the true parameters, true training dataset, and/or complete graph; and 3) outperform the existing attack for evading collective classification methods and some graph neural network methods. We also apply our attacks to evade Sybil detection using a large-scale Twitter dataset and apply our attacks as a defense against attribute inference attacks using a large-scale Google+ dataset.

Includes members:
  Member "adversarial attacks on graph neural networks via meta learning":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "transferring robustness for graph neural network against poisoning attacks")
  Member "certifiable robustness and robust training for graph convolutional networks":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "transferring robustness for graph neural network against poisoning attacks")
  Member "adversarial attack on graph structured data":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "transferring robustness for graph neural network against poisoning attacks")
  Member "adversarial attacks on node embeddings via graph poisoning":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "transferring robustness for graph neural network against poisoning attacks")
  Member "poisoning attacks to graph based recommender systems":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "mga momentum gradient attack on network")
  Member "graph based security and privacy analytics via collective classification with joint weight learning and propagation":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "defending against machine learning based inference attacks via adversarial examples opportunities and challenges")
  Member "structure based sybil detection in social networks via local rule based propagation":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "graph based security and privacy analytics via collective classification with joint weight learning and propagation")
  Member "manipulating machine learning poisoning attacks and countermeasures for regression learning":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "secure and robust machine learning for healthcare a survey")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)