human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "efficient decision based black box adversarial attacks on face recognition"
  Abstract: Face recognition has obtained remarkable progress in recent years due to the great improvement of deep convolutional neural networks (CNNs). However, deep CNNs are vulnerable to adversarial examples, which can cause fateful consequences in real-world face recognition applications with security-sensitive purposes. Adversarial attacks are widely studied as they can identify the vulnerability of the models before they are deployed. In this paper, we evaluate the robustness of state-of-the-art face recognition models in the decision-based black-box attack setting, where the attackers have no access to the model parameters and gradients, but can only acquire hard-label predictions by sending queries to the target model. This attack setting is more practical in real-world face recognition systems. To improve the efficiency of previous methods, we propose an evolutionary attack algorithm, which can model the local geometries of the search directions and reduce the dimension of the search space. Extensive experiments demonstrate the effectiveness of the proposed method that induces a minimum perturbation to an input face image with fewer queries. We also apply the proposed method to attack a real-world face recognition system successfully.

Connected through hyperedge HE-1 (induced by source paper "toward adversarial robustness via semi supervised robust training"):
  with members:
    - "adversarial training and robustness for multiple perturbations"
    - "theoretically principled trade off between robustness and accuracy"
    - "certifiable robustness and robust training for graph convolutional networks"
    - "advertorch v0 1 an adversarial robustness toolbox based on pytorch"
    - "detection based defense against adversarial examples from the steganalysis point of view"
    - "towards the first adversarially robust neural network model on mnist"
    - "defense gan protecting classifiers against adversarial attacks using generative models"
    - "decoupling direction and norm for efficient gradient based l2 adversarial attacks and defenses"

Connected through hyperedge HE-2 (induced by source paper "facial attribute capsules for noise face super resolution"):
  with members:
    - "occlusion robust face recognition based on mask learning with pairwisedifferential siamese network"
    - "decorrelated adversarial learning for age invariant face recognition"
    - "mvf net multi view 3d face morphable model regression"
    - "orthogonal deep features decomposition for age invariant face recognition"
    - "arcface additive angular margin loss for deep face recognition"
    - "residual dense network for image super resolution"
    - "fsrnet end to end learning face super resolution with facial priors"
    - "attention aware face hallucination via deep reinforcement learning"

Connected through hyperedge HE-3 (induced by source paper "trust but verify an information theoretic explanation for the adversarial fragility of machine learning systems and a general defense against adversarial attacks"):
  with members:
    - "discretization based solutions for secure machine learning against adversarial attacks"
    - "parsimonious black box adversarial attacks via efficient combinatorial optimization"
    - "jumprelu a retrofit defense strategy for adversarial attacks"
    - "robust neural networks using randomized adversarial training"
    - "weight map layer for noise and adversarial attack robustness"
    - "zk gandef a gan based zero knowledge adversarial training defense for neural networks"
    - "simple black box adversarial attacks"
    - "gandef a gan based adversarial training defense for neural network classifier"

Connected through hyperedge HE-4 (induced by source paper "amora black box adversarial morphing attack"):
  with members:
    - "fakelocator robust localization of gan based face manipulations via semantic segmentation networks with bells and whistles"
    - "advfaces adversarial face synthesis"
    - "attacking optical flow"
    - "fakespotter a simple baseline for spotting ai synthesized fake faces"
    - "wasserstein adversarial examples via projected sinkhorn iterations"
    - "wasserstein smoothing certified robustness against wasserstein adversarial attacks"
    - "machine learning testing survey landscapes and horizons"
    - "fakespotter a simple yet robust baseline for spotting ai synthesized fake faces"

Connected through hyperedge HE-5 (induced by source paper "black box adversarial attack with transferable model based embedding"):
  with members:
    - "parsimonious black box adversarial attacks via efficient combinatorial optimization"
    - "a direct approach to robust deep learning using adversarial networks"
    - "simple black box adversarial attacks"
    - "improving black box adversarial attacks with a transfer based prior"
    - "nattack learning the distributions of adversarial examples for an improved black box attack on deep neural networks"
    - "autozoom autoencoder based zeroth order optimization method for attacking black box neural networks"
    - "adversarial vision challenge"
    - "mobilenetv2 inverted residuals and linear bottlenecks"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)