human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "feature guided black box safety testing of deep neural networks"
  Abstract: Despite the improved accuracy of deep neural networks, the discovery of adversarial examples has raised serious safety concerns. Most existing approaches for crafting adversarial examples necessitate some knowledge (architecture, parameters, etc.) of the network at hand. In this paper, we focus on image classifiers and propose a feature-guided black-box approach to test the safety of deep neural networks that requires no such knowledge. Our algorithm employs object detection techniques such as SIFT (Scale Invariant Feature Transform) to extract features from an image. These features are converted into a mutable saliency distribution, where high probability is assigned to pixels that affect the composition of the image with respect to the human visual system. We formulate the crafting of adversarial examples as a two-player turn-based stochastic game, where the first player's objective is to minimise the distance to an adversarial example by manipulating the features, and the second player can be cooperative, adversarial, or random. We show that, theoretically, the two-player game can con- verge to the optimal strategy, and that the optimal strategy represents a globally minimal adversarial image. For Lipschitz networks, we also identify conditions that provide safety guarantees that no adversarial examples exist. Using Monte Carlo tree search we gradually explore the game state space to search for adversarial examples. Our experiments show that, despite the black-box setting, manipulations guided by a perception-based saliency distribution are competitive with state-of-the-art methods that rely on white-box saliency matrices or sophisticated optimization procedures. Finally, we show how our method can be used to evaluate robustness of neural networks in safety-critical applications such as traffic sign recognition in self-driving cars.

Connected through hyperedge HE-1 (induced by source paper "importance driven deep learning system testing"):
  with members:
    - "input prioritization for testing neural networks"
    - "deepfault fault localization for deep neural networks"
    - "machine learning testing survey landscapes and horizons"
    - "formal security analysis of neural networks using symbolic intervals"
    - "symbolic execution for deep neural networks"
    - "deepgauge multi granularity testing criteria for deep learning systems"
    - "deepmutation mutation testing of deep learning systems"
    - "concolic testing for deep neural networks"

Connected through hyperedge HE-2 (induced by source paper "reludiff differential verification of deep neural networks"):
  with members:
    - "towards compact and robust deep neural networks"
    - "deep neural network compression for aircraft collision avoidance systems"
    - "formal security analysis of neural networks using symbolic intervals"
    - "a dual approach to scalable verification of deep networks"
    - "deepgauge multi granularity testing criteria for deep learning systems"
    - "concolic testing for deep neural networks"
    - "reachability analysis of deep neural networks with provable guarantees"
    - "efficient formal safety analysis of neural networks"

Connected through hyperedge HE-3 (induced by source paper "reliability validation of learning enabled vehicle tracking"):
  with members:
    - "test metrics for recurrent neural networks"
    - "reasoning about cognitive trust in stochastic multiagent systems"
    - "adversarial sample detection for deep neural network through model mutation testing"
    - "detecting and tracking small moving objects in wide area motion imagery wami using convolutional neural networks cnns"
    - "deepgauge comprehensive and multi granularity testing criteria for gauging the robustness of deep learning systems"
    - "symbolic execution for deep neural networks"
    - "identifying implementation bugs in machine learning based image classifiers using metamorphic testing"
    - "deepmutation mutation testing of deep learning systems"

Connected through hyperedge HE-4 (induced by source paper "a safety framework for critical systems utilising deep neural networks"):
  with members:
    - "assuring the machine learning lifecycle desiderata methods and challenges"
    - "assessing the safety and reliability of autonomous vehicles from road testing"
    - "deepgauge comprehensive and multi granularity testing criteria for gauging the robustness of deep learning systems"
    - "gradient descent finds global minima of deep neural networks"
    - "concolic testing for deep neural networks"
    - "reachability analysis of deep neural networks with provable guarantees"
    - "using machine learning safely in automotive software an assessment and adaption of software process requirements in iso 26262"
    - "a survey of safety and trustworthiness of deep neural networks"

Connected through hyperedge HE-5 (induced by source paper "taking care of the discretization problem a black box adversarial image attack in discrete integer domain"):
  with members:
    - "towards improved testing for deep learning"
    - "one pixel attack for fooling deep neural networks"
    - "procedural noise adversarial examples for black box attacks on deep convolutional networks"
    - "on the design of black box adversarial examples by leveraging gradient free optimization and operator splitting method"
    - "autozoom autoencoder based zeroth order optimization method for attacking black box neural networks"
    - "spatially transformed adversarial examples"
    - "formal security analysis of neural networks using symbolic intervals"
    - "commandersong a systematic approach for practical adversarial voice recognition"

Connected through hyperedge HE-6 (induced by source paper "testing and verification of neural network based safety critical control software a systematic literature review"):
  with members:
    - "visual analytics in deep learning an interrogative survey for the next frontiers"
    - "local rule based explanations of black box decision systems"
    - "deepgauge multi granularity testing criteria for deep learning systems"
    - "experimental resilience assessment of an open source driving agent"
    - "interpreting deep classifier by visual distillation of dark knowledge"
    - "dlfuzz differential fuzzing testing of deep learning systems"
    - "software engineering challenges of deep learning"
    - "feature squeezing detecting adversarial examples in deep neural networks"

Connected through hyperedge HE-7 (induced by source paper "deepsearch simple and effective blackbox fuzzing of deep neural networks"):
  with members:
    - "towards improved testing for deep learning"
    - "algorithms for verifying deep neural networks"
    - "machine learning testing survey landscapes and horizons"
    - "on evaluating adversarial robustness"
    - "the efficacy of shield under different threat models"
    - "formal security analysis of neural networks using symbolic intervals"
    - "a dual approach to scalable verification of deep networks"
    - "symbolic execution for deep neural networks"

Connected through hyperedge HE-8 (induced by source paper "adversarial sample detection for deep neural network through model mutation testing"):
  with members:
    - "deepgauge comprehensive and multi granularity testing criteria for gauging the robustness of deep learning systems"
    - "spatially transformed adversarial examples"
    - "characterizing adversarial subspaces using local intrinsic dimensionality"
    - "deepgauge multi granularity testing criteria for deep learning systems"
    - "deepmutation mutation testing of deep learning systems"
    - "concolic testing for deep neural networks"
    - "detecting adversarial samples for deep neural networks through mutation testing"
    - "towards robust training of neural networks by regularizing adversarial gradients"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)