human: Given a hyperedge-centered hypergraph: <hypergraph>, where the center hyperedge is induced by one source paper and its member nodes are the cited papers.

Details of the hypergraph:
Center hyperedge (induced by source paper "adversarial attacks against automatic speech recognition systems via psychoacoustic hiding"):
  Abstract: Voice interfaces are becoming accepted widely as input methods for a diverse set of devices. This development is driven by rapid improvements in automatic speech recognition (ASR), which now performs on par with human listening in many tasks. These improvements base on an ongoing evolution of DNNs as the computational core of ASR. However, recent research results show that DNNs are vulnerable to adversarial perturbations, which allow attackers to force the transcription into a malicious output. #R##N#In this paper, we introduce a new type of adversarial examples based on psychoacoustic hiding. Our attack exploits the characteristics of DNN-based ASR systems, where we extend the original analysis procedure by an additional backpropagation step. We use this backpropagation to learn the degrees of freedom for the adversarial perturbation of the input signal, i.e., we apply a psychoacoustic model and manipulate the acoustic signal below the thresholds of human perception. To further minimize the perceptibility of the perturbations, we use forced alignment to find the best fitting temporal alignment between the original audio sample and the malicious target transcription. These extensions allow us to embed an arbitrary audio input with a malicious voice command that is then transcribed by the ASR system, with the audio signal remaining barely distinguishable from the original signal. In an experimental evaluation, we attack the state-of-the-art speech recognition system Kaldi and determine the best performing parameter and analysis setup for different types of input. Our results show that we are successful in up to 98% of cases with a computational effort of fewer than two minutes for a ten-second audio file. Based on user studies, we found that none of our target transcriptions were audible to human listeners, who still understand the original speech content with unchanged accuracy.

Includes members:
  Member "commandersong a systematic approach for practical adversarial voice recognition":
    also connected through other hyperedges:
      - Hyperedge HE-1 (induced by source paper "security vetting process of smart home assistant applications a first look and case studies")
  Member "black box adversarial attacks with limited queries and information":
    also connected through other hyperedges:
      - Hyperedge HE-2 (induced by source paper "universal adversarial attack on attention and the resulting dataset damagenet")
  Member "stealing hyperparameters in machine learning":
    also connected through other hyperedges:
      - Hyperedge HE-3 (induced by source paper "dynamic backdoor attacks against machine learning models")
  Member "dolphinattack inaudible voice commands":
    also connected through other hyperedges:
      - Hyperedge HE-4 (induced by source paper "ghostimage perception domain attacks against vision based object classification systems")
  Member "english conversational telephone speech recognition by humans and machines":
    also connected through other hyperedges:
      - Hyperedge HE-5 (induced by source paper "distributed training of deep neural network acoustic models for automatic speech recognition")
  Member "building competitive direct acoustics to word models for english conversational speech recognition":
    also connected through other hyperedges:
      - Hyperedge HE-6 (induced by source paper "accelerating rnn transducer inference via one step constrained beam search")
  Member "inaudible voice commands":
    also connected through other hyperedges:
      - Hyperedge HE-7 (induced by source paper "taxonomy and challenges of out of band signal injection attacks and defenses")
  Member "a network of deep neural networks for distant speech recognition":
    also connected through other hyperedges:
      - Hyperedge HE-8 (induced by source paper "unpaired speech enhancement by acoustic and adversarial supervision for speech recognition")

Question: Please tell me which class the source paper belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)