human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "on the structural sensitivity of deep convolutional networks to the directions of fourier basis functions"):
  Abstract: Data-agnostic quasi-imperceptible perturbations on inputs are known to degrade recognition accuracy of deep convolutional networks severely. This phenomenon is considered to be a potential security issue. Moreover, some results on statistical generalization guarantees indicate that the phenomenon can be a key to improve the networks' generalization. However, the characteristics of the shared directions of such harmful perturbations remain unknown. Our primal finding is that convolutional networks are sensitive to the directions of Fourier basis functions. We derived the property by specializing a hypothesis of the cause of the sensitivity, known as the linearity of neural networks, to convolutional networks and empirically validated it. As a by-product of the analysis, we propose an algorithm to create shift-invariant universal adversarial perturbations available in black-box settings.

Includes members:
  Member "the singular values of convolutional layers":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "understanding generalization in deep learning via tensor methods")
  Member "lipschitz margin training scalable certification of perturbation invariance for deep neural networks":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "varmixup exploiting the latent space for robust training and inference")
  Member "stronger generalization bounds for deep nets via a compression approach":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "train large then compress rethinking model size for efficient training and inference of transformers")
  Member "defense against adversarial attacks with saak transform":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "defending against universal attacks through selective feature regeneration")
  Member "obfuscated gradients give a false sense of security circumventing defenses to adversarial examples":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "adversarial ranking attack and defense")
  Member "provable defenses against adversarial examples via the convex outer adversarial polytope":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "overfitting in adversarially robust deep learning")
  Member "fast feature fool a data independent approach to universal adversarial perturbations":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "regional homogeneity towards learning transferable universal adversarial perturbations against defenses")
  Member "countering adversarial images using input transformations":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "adversarial ranking attack and defense")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)