human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "generative poisoning attack method against neural networks"
  Abstract: Poisoning attack is identified as a severe security threat to machine learning algorithms. In many applications, for example, deep neural network (DNN) models collect public data as the inputs to perform re-training, where the input data can be poisoned. Although poisoning attack against support vector machines (SVM) has been extensively studied before, there is still very limited knowledge about how such attack can be implemented on neural networks (NN), especially DNNs. In this work, we first examine the possibility of applying traditional gradient-based method (named as the direct gradient method) to generate poisoned data against NNs by leveraging the gradient of the target model w.r.t. the normal data. We then propose a generative method to accelerate the generation rate of the poisoned data: an auto-encoder (generator) used to generate poisoned data is updated by a reward function of the loss, and the target NN model (discriminator) receives the poisoned data to calculate the loss w.r.t. the normal data. Our experiment results show that the generative method can speed up the poisoned data generation rate by up to 239.38x compared with the direct gradient method, with slightly lower model accuracy degradation. A countermeasure is also designed to detect such poisoning attack methods by checking the loss of the target model.

Connected through hyperedge HE-1 (induced by source paper "humpty dumpty controlling word meanings via corpus poisoning"):
  with members:
    - "towards a robust deep neural network in text domain a survey"
    - "universal adversarial triggers for attacking and analyzing nlp"
    - "cross lingual alignment of contextual word embeddings with applications to zero shot dependency parsing"
    - "understanding the origins of bias in word embeddings"
    - "adversarial attacks on node embeddings via graph poisoning"
    - "black box generation of adversarial text sequences to evade deep learning classifiers"
    - "deep text classification can be fooled"
    - "towards understanding linear word analogies"

Connected through hyperedge HE-2 (induced by source paper "fawkes protecting personal privacy against unauthorized deep learning models"):
  with members:
    - "strong baseline defenses against clean label poisoning attacks"
    - "anonymousnet natural face de identification with measurable privacy"
    - "hiding faces in plain sight disrupting ai face synthesis with adversarial perturbations"
    - "fooling automated surveillance cameras adversarial patches to attack person detection"
    - "making an invisibility cloak real world adversarial attacks on object detectors"
    - "advhat real world adversarial attack on arcface face id system"
    - "using honeypots to catch adversarial attacks on neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"

Connected through hyperedge HE-3 (induced by source paper "certified robustness to label flipping attacks via randomized smoothing"):
  with members:
    - "tight certificates of adversarial robustness for randomly smoothed classifiers"
    - "on defending against label flipping attacks on malware detection systems"
    - "certified adversarial robustness via randomized smoothing"
    - "provably robust deep learning via adversarially trained smoothed classifiers"
    - "compressed sensing with adversarial sparse noise via l1 regression"
    - "learning with bad training data via iterative trimmed loss minimization"
    - "efficient algorithms and lower bounds for robust linear regression"
    - "representer point selection for explaining deep neural networks"

Connected through hyperedge HE-4 (induced by source paper "rab provable robustness against backdoor attacks"):
  with members:
    - "dynamic backdoor attacks against machine learning models"
    - "backdoor attacks against transfer learning with pre trained deep learning models"
    - "provable robust learning based on transformation specific smoothing"
    - "on certifying robustness against backdoor attacks via randomized smoothing"
    - "certified robustness to label flipping attacks via randomized smoothing"
    - "certified adversarial robustness via randomized smoothing"
    - "strip a defence against trojan attacks on deep neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"

Connected through hyperedge HE-5 (induced by source paper "backdoor attacks against transfer learning with pre trained deep learning models"):
  with members:
    - "defending against misclassification attacks in transfer learning"
    - "fine pruning defending against backdooring attacks on deep neural networks"
    - "is feature selection secure against training data poisoning"
    - "potrojan powerful neural level trojan designs in deep learning models"
    - "feature squeezing detecting adversarial examples in deep neural networks"
    - "magnet a two pronged defense against adversarial examples"
    - "towards poisoning of deep learning algorithms with back gradient optimization"
    - "targeted backdoor attacks on deep learning systems using data poisoning"

Connected through hyperedge HE-6 (induced by source paper "impact of low bitwidth quantization on the adversarial robustness for embedded neural networks"):
  with members:
    - "theoretically principled trade off between robustness and accuracy"
    - "defensive quantization when efficiency meets robustness"
    - "on evaluating adversarial robustness"
    - "defending against whitebox adversarial attacks via randomized discretization"
    - "adversarial examples a complete characterisation of the phenomenon"
    - "on the effectiveness of interval bound propagation for training verifiably robust models"
    - "stochastic activation pruning for robust adversarial defense"
    - "efficient two step adversarial defense for deep neural networks"

Connected through hyperedge HE-7 (induced by source paper "evaluating differentially private machine learning in practice"):
  with members:
    - "differentially private model publishing for deep learning"
    - "privacy preserving collaborative deep learning with irregular participants"
    - "cache telepathy leveraging shared resource attacks to learn dnn architectures"
    - "differentially private empirical risk minimization revisited faster and more general"
    - "dp admm admm based distributed learning with differential privacy"
    - "how to backdoor federated learning"
    - "ml leaks model and data independent membership inference attacks and defenses on machine learning models"
    - "efficient deep learning on multi source private data"

Connected through hyperedge HE-8 (induced by source paper "detecting ai trojans using meta neural analysis"):
  with members:
    - "strip a defence against trojan attacks on deep neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"
    - "exploiting unintended feature leakage in collaborative learning"
    - "fine pruning defending against backdooring attacks on deep neural networks"
    - "mobilenetv2 inverted residuals and linear bottlenecks"
    - "sentinet detecting physical attacks against deep learning systems"
    - "backdooring convolutional neural networks via targeted weight perturbations"
    - "turning your weakness into a strength watermarking deep neural networks by backdooring"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)