human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "defense against universal adversarial perturbations"):
  Abstract: Recent advances in Deep Learning show the existence of image-agnostic quasi-imperceptible perturbations that when applied to `any' image can fool a state-of-the-art network classifier to change its prediction about the image label. These `Universal Adversarial Perturbations' pose a serious threat to the success of Deep Learning in practice. We present the first dedicated framework to effectively defend the networks against such perturbations. Our approach learns a Perturbation Rectifying Network (PRN) as `pre-input' layers to a targeted model, such that the targeted model needs no modification. The PRN is learned from real and synthetic image-agnostic perturbations, where an efficient method to compute the latter is also proposed. A perturbation detector is separately trained on the Discrete Cosine Transform of the input-output difference of the PRN. A query image is first passed through the PRN and verified by the detector. If a perturbation is detected, the output of the PRN is used for label prediction instead of the actual image. A rigorous evaluation shows that our framework can defend the network classifiers against unseen adversarial perturbations in the real-world scenarios with up to 97.5% success rate. The PRN also generalizes well in the sense that training for one targeted network defends another network with a comparable success rate.

Includes members:
  Member "deflecting adversarial attacks with pixel deflection":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "adversarial ranking attack and defense")
  Member "threat of adversarial attacks on deep learning in computer vision a survey":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "challenges and countermeasures for adversarial attacks on deep reinforcement learning")
  Member "no need to worry about adversarial examples in object detection in autonomous vehicles":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "adversarial ranking attack and defense")
  Member "safetynet detecting and rejecting adversarial examples robustly":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "adversarial ranking attack and defense")
  Member "adversarial transformation networks learning to generate adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "universal adversarial attack on attention and the resulting dataset damagenet")
  Member "analysis of universal adversarial perturbations":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "challenges and countermeasures for adversarial attacks on deep reinforcement learning")
  Member "adversarial examples for semantic segmentation and object detection":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "category wise attack transferable adversarial examples for anchor free object detection")
  Member "a boundary tilting persepective on the phenomenon of adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "adversarial data encryption")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)