human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "towards adversarially robust object detection"
  Abstract: Object detection is an important vision task and has emerged as an indispensable component in many vision system, rendering its robustness as an increasingly important performance factor for practical applications. While object detection models have been demonstrated to be vulnerable against adversarial attacks by many recent works, very few efforts have been devoted to improving their robustness. In this work, we take an initial attempt towards this direction. We first revisit and systematically analyze object detectors and many recently developed attacks from the perspective of model robustness. We then present a multi-task learning perspective of object detection and identify an asymmetric role of task losses. We further develop an adversarial training approach which can leverage the multiple sources of attacks for improving the robustness of detection models. Extensive experiments on PASCAL-VOC and MS-COCO verified the effectiveness of the proposed approach.

Connected through hyperedge HE-1 (induced by source paper "adversarial ranking attack and defense"):
  with members:
    - "curls whey boosting black box adversarial attacks"
    - "one pixel attack for fooling deep neural networks"
    - "metric learning with horde high order regularizer for deep embeddings"
    - "sparse and imperceivable adversarial attacks"
    - "who s afraid of adversarial queries the impact of image modifications on content based image retrieval"
    - "hopskipjumpattack a query efficient decision based attack"
    - "defense against adversarial images using web scale nearest neighbor search"
    - "adversarial learning with margin based triplet embedding regularization"

Connected through hyperedge HE-2 (induced by source paper "mixup regularization for region proposal based object detectors"):
  with members:
    - "augmenting data with mixup for sentence classification an empirical study"
    - "bag of freebies for training object detection neural networks"
    - "learning to generate synthetic data via compositing"
    - "on physical adversarial patches for object detection"
    - "mixmatch a holistic approach to semi supervised learning"
    - "recent advances in object detection in the age of deep convolutional neural networks"
    - "regularization for deep learning a taxonomy"
    - "yolov3 an incremental improvement"

Connected through hyperedge HE-3 (induced by source paper "defense against adversarial attacks using feature scattering based adversarial training"):
  with members:
    - "one pixel attack for fooling deep neural networks"
    - "joint adversarial training incorporating both spatial and pixel attacks"
    - "defense against adversarial images using web scale nearest neighbor search"
    - "wild patterns ten years after the rise of adversarial machine learning"
    - "adversarial patch"
    - "feature denoising for improving adversarial robustness"
    - "adversarial logit pairing"
    - "adversarial text generation via feature mover s distance"

Connected through hyperedge HE-4 (induced by source paper "rethinking classification and localization for object detection"):
  with members:
    - "centernet keypoint triplets for object detection"
    - "mask scoring r cnn"
    - "scale aware trident networks for object detection"
    - "objects as points"
    - "cornernet lite efficient keypoint based object detection"
    - "bottom up object detection by grouping extreme and center points"
    - "rethinking classification and localization for cascade r cnn"
    - "cornernet detecting objects as paired keypoints"

Connected through hyperedge HE-5 (induced by source paper "design and interpretation of universal adversarial patches in face detection"):
  with members:
    - "theoretically principled trade off between robustness and accuracy"
    - "a general framework for adversarial examples with objectives"
    - "hiding faces in plain sight disrupting ai face synthesis with adversarial perturbations"
    - "fooling automated surveillance cameras adversarial patches to attack person detection"
    - "on physical adversarial patches for object detection"
    - "advhat real world adversarial attack on arcface face id system"
    - "dsfd dual shot face detector"
    - "adversarial patch"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)