human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "runtime analysis of whole system provenance"):
  Abstract: Identifying the root cause and impact of a system intrusion remains a foundational challenge in computer security. Digital provenance provides a detailed history of the flow of information within a computing system, connecting suspicious events to their root causes. Although existing provenance-based auditing techniques provide value in forensic analysis, they assume that such analysis takes place only retrospectively. Such post-hoc analysis is insufficient for realtime security applications, moreover, even for forensic tasks, prior provenance collection systems exhibited poor performance and scalability, jeopardizing the timeliness of query responses. #R##N#We present CamQuery, which provides inline, realtime provenance analysis, making it suitable for implementing security applications. CamQuery is a Linux Security Module that offers support for both userspace and in-kernel execution of analysis applications. We demonstrate the applicability of CamQuery to a variety of runtime security applications including data loss prevention, intrusion detection, and regulatory compliance. In evaluation, we demonstrate that CamQuery reduces the latency of realtime query mechanisms, while imposing minimal overheads on system execution. CamQuery thus enables the further deployment of provenance-based technologies to address central challenges in computer security.

Includes members:
  Member "provenance based intrusion detection opportunities and challenges":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "detecting safety and security faults in plc systems with data provenance")
  Member "saql a stream based query system for real time abnormal system behavior detection":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "unicorn runtime provenance based detector for advanced persistent threats")
  Member "struc2vec learning node representations from structural identity":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "cube2net efficient query specific network construction with data cube organization")
  Member "camflow managed data sharing for cloud services":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "decision provenance harnessing data flow for accountable systems")
  Member "frappuccino fault detection through runtime analysis of provenance":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "unicorn runtime provenance based detector for advanced persistent threats")
  Member "practical whole system provenance capture":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "unicorn runtime provenance based detector for advanced persistent threats")
  Member "high throughput ingest of provenance records into accumulo":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "large scale organization and inference of an imagery dataset for public safety")
  Member "attack analysis results for adversarial engagement 1 of the darpa transparent computing program":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "on preempting advanced persistent threats using probabilistic graphical models")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)