human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "defensive quantization when efficiency meets robustness"
  Abstract: Neural network quantization is becoming an industry standard to efficiently deploy deep learning models on hardware platforms, such as CPU, GPU, TPU, and FPGAs. However, we observe that the conventional quantization approaches are vulnerable to adversarial attacks. This paper aims to raise people's awareness about the security of the quantized models, and we designed a novel quantization methodology to jointly optimize the efficiency and robustness of deep learning models. We first conduct an empirical study to show that vanilla quantization suffers more from adversarial attacks. We observe that the inferior robustness comes from the error amplification effect, where the quantization operation further enlarges the distance caused by amplified noise. Then we propose a novel Defensive Quantization (DQ) method by controlling the Lipschitz constant of the network during quantization, such that the magnitude of the adversarial noise remains non-expansive during inference. Extensive experiments on CIFAR-10 and SVHN datasets demonstrate that our new quantization method can defend neural networks against adversarial examples, and even achieves superior robustness than their full-precision counterparts while maintaining the same hardware efficiency as vanilla quantization approaches. As a by-product, DQ can also improve the accuracy of quantized models without adversarial attack.

Connected through hyperedge HE-1 (induced by source paper "triple wins boosting accuracy robustness and efficiency together by enabling input adaptive inference"):
  with members:
    - "adversarial robustness may be at odds with simplicity"
    - "certified adversarial robustness via randomized smoothing"
    - "theoretically principled trade off between robustness and accuracy"
    - "adversarially trained model compression when robustness meets efficiency"
    - "towards understanding adversarial examples systematically exploring data size task and model factors"
    - "dual dynamic inference enabling more efficient adaptive and controllable deep inference"
    - "mobilenetv2 inverted residuals and linear bottlenecks"
    - "sparse dnns with improved adversarial robustness"

Connected through hyperedge HE-2 (induced by source paper "gradient ell_1 regularization for quantization robustness"):
  with members:
    - "data free quantization through weight equalization and bias correction"
    - "improving neural network quantization without retraining using outlier channel splitting"
    - "low bit quantization of neural networks for efficient inference"
    - "same same but different recovering neural network quantization error through weight factorization"
    - "quantizing deep convolutional networks for efficient inference a whitepaper"
    - "sparse dnns with improved adversarial robustness"
    - "the singular values of convolutional layers"
    - "relaxed quantization for discretized neural networks"

Connected through hyperedge HE-3 (induced by source paper "impact of low bitwidth quantization on the adversarial robustness for embedded neural networks"):
  with members:
    - "theoretically principled trade off between robustness and accuracy"
    - "on evaluating adversarial robustness"
    - "defending against whitebox adversarial attacks via randomized discretization"
    - "adversarial examples a complete characterisation of the phenomenon"
    - "on the effectiveness of interval bound propagation for training verifiably robust models"
    - "stochastic activation pruning for robust adversarial defense"
    - "efficient two step adversarial defense for deep neural networks"
    - "to compress or not to compress understanding the interactions between adversarial attacks and neural network compression"

Connected through hyperedge HE-4 (induced by source paper "adversarial learning in statistical classification a comprehensive review of defenses against attacks"):
  with members:
    - "revealing backdoors post training in dnn classifiers via novel inference on optimized perturbations inducing group misclassification"
    - "strip a defence against trojan attacks on deep neural networks"
    - "revealing perceptible backdoors without the training set via the maximum achievable misclassification fraction statistic"
    - "wild patterns ten years after the rise of adversarial machine learning"
    - "detecting backdoor attacks on deep neural networks by activation clustering"
    - "lipschitz margin training scalable certification of perturbation invariance for deep neural networks"
    - "a mixture model based defense for data poisoning attacks against naive bayes spam filters"
    - "backdoor embedding in convolutional neural network models via invisible perturbation"

Connected through hyperedge HE-5 (induced by source paper "adversarial robustness vs model compression or both"):
  with members:
    - "topology attack and defense for graph neural networks an optimization perspective"
    - "a direct approach to robust deep learning using adversarial networks"
    - "interpreting adversarial examples by activation promotion and suppression"
    - "adv bnn improved adversarial defense through robust bayesian neural network"
    - "learning and generalization in overparameterized neural networks going beyond two layers"
    - "sparse dnns with improved adversarial robustness"
    - "the lottery ticket hypothesis finding sparse trainable neural networks"
    - "training for faster adversarial robustness verification via inducing relu stability"

Connected through hyperedge HE-6 (induced by source paper "structure invariant testing for machine translation"):
  with members:
    - "metamorphic testing a new approach for generating next test cases"
    - "machine learning testing survey landscapes and horizons"
    - "adversarial sample detection for deep neural network through model mutation testing"
    - "sirenattack generating adversarial audio for end to end acoustic systems"
    - "achieving human parity on automatic chinese to english news translation"
    - "code2vec learning distributed representations of code"
    - "on adversarial examples for character level neural machine translation"
    - "adversarial example generation with syntactically controlled paraphrase networks"

Connected through hyperedge HE-7 (induced by source paper "adversarially trained model compression when robustness meets efficiency"):
  with members:
    - "learning sparsity and quantization jointly and automatically for neural network compression via constrained optimization"
    - "adversarial robustness may be at odds with simplicity"
    - "dual dynamic inference enabling more efficient adaptive and controllable deep inference"
    - "towards imperceptible and robust adversarial example attacks against neural networks"
    - "mobilenetv2 inverted residuals and linear bottlenecks"
    - "sparse dnns with improved adversarial robustness"
    - "stochastic activation pruning for robust adversarial defense"
    - "to compress or not to compress understanding the interactions between adversarial attacks and neural network compression"

Connected through hyperedge HE-8 (induced by source paper "model compression with adversarial robustness a unified optimization framework"):
  with members:
    - "learning sparsity and quantization jointly and automatically for neural network compression via constrained optimization"
    - "adversarial robustness may be at odds with simplicity"
    - "collaborative global local networks for memory efficient segmentation of ultra high resolution images"
    - "dual dynamic inference enabling more efficient adaptive and controllable deep inference"
    - "towards imperceptible and robust adversarial example attacks against neural networks"
    - "sparse dnns with improved adversarial robustness"
    - "stochastic activation pruning for robust adversarial defense"
    - "to compress or not to compress understanding the interactions between adversarial attacks and neural network compression"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)