human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "a deep learning based framework for conducting stealthy attacks in industrial control systems"
  Abstract: Industrial control systems (ICS), which in many cases are components of critical national infrastructure, are increasingly being connected to other networks and the wider internet motivated by factors such as enhanced operational functionality and improved efficiency. However, set in this context, it is easy to see that the cyber attack surface of these systems is expanding, making it more important than ever that innovative solutions for securing ICS be developed and that the limitations of these solutions are well understood. The development of anomaly based intrusion detection techniques has provided capability for protecting ICS from the serious physical damage that cyber breaches are capable of delivering to them by monitoring sensor and control signals for abnormal activity. Recently, the use of so-called stealthy attacks has been demonstrated where the injection of false sensor measurements can be used to mimic normal control system signals, thereby defeating anomaly detectors whilst still delivering attack objectives. In this paper we define a deep learning-based framework which allows an attacker to conduct stealthy attacks with minimal a-priori knowledge of the target ICS. Specifically, we show that by intercepting the sensor and/or control signals in an ICS for a period of time, a malicious program is able to automatically learn to generate high-quality stealthy attacks which can achieve specific attack goals whilst bypassing a black box anomaly detector. Furthermore, we demonstrate the effectiveness of our framework for conducting stealthy attacks using two real-world ICS case studies. We contend that our results motivate greater attention on this area by the security community as we demonstrate that currently assumed barriers for the successful execution of such attacks are relaxed.

Connected through hyperedge HE-1 (induced by source paper "conaml constrained adversarial machine learning for cyber physical systems"):
  with members:
    - "textbugger generating adversarial text against real world applications"
    - "dynamic detection of false data injection attack in smart grid using deep learning"
    - "adversarial attacks and defences a survey"
    - "learning from mutants using code mutation to learn and monitor invariants of a cyber physical system"
    - "adversarial regression for detecting attacks in cyber physical systems"
    - "no need to worry about adversarial examples in object detection in autonomous vehicles"
    - "anomaly detection for a water treatment system using unsupervised machine learning"
    - "deeptest automated testing of deep neural network driven autonomous cars"

Connected through hyperedge HE-2 (induced by source paper "can t boil this frog robustness of online trained autoencoder based anomaly detectors to adversarial poisoning attacks"):
  with members:
    - "efficient cyber attacks detection in industrial control systems using lightweight neural networks"
    - "real time evasion attacks with physical constraints on deep learning based anomaly detectors in industrial control systems"
    - "deep learning for anomaly detection a survey"
    - "intrusion detection for industrial control systems evaluation analysis and adversarial attacks"
    - "manipulating machine learning poisoning attacks and countermeasures for regression learning"
    - "poison frogs targeted clean label poisoning attacks on neural networks"
    - "adversarial regression for detecting attacks in cyber physical systems"
    - "cyber physical systems security a survey"

Connected through hyperedge HE-3 (induced by source paper "intrusion detection for industrial control systems evaluation analysis and adversarial attacks"):
  with members:
    - "deep latent defence"
    - "efficient cyber attacks detection in industrial control systems using lightweight neural networks"
    - "real time evasion attacks with physical constraints on deep learning based anomaly detectors in industrial control systems"
    - "mad gan multivariate anomaly detection for time series data with generative adversarial networks"
    - "adversarial patch"
    - "anomaly detection for water treatment system based on neural network with automatic architecture optimization"
    - "deep k nearest neighbors towards confident interpretable and robust deep learning"
    - "early stage malware prediction using recurrent neural networks"

Connected through hyperedge HE-4 (induced by source paper "deep latent defence"):
  with members:
    - "adversarial patch"
    - "deep k nearest neighbors towards confident interpretable and robust deep learning"
    - "genattack practical black box attacks with gradient free optimization"
    - "shield fast practical defense and vaccination for deep learning using jpeg compression"
    - "audio adversarial examples targeted attacks on speech to text"
    - "feature squeezing detecting adversarial examples in deep neural networks"
    - "motivating the rules of the game for adversarial example research"
    - "adversarial attacks on neural network policies"

Connected through hyperedge HE-5 (induced by source paper "efficient cyber attacks detection in industrial control systems using lightweight neural networks"):
  with members:
    - "real time evasion attacks with physical constraints on deep learning based anomaly detectors in industrial control systems"
    - "mad gan multivariate anomaly detection for time series data with generative adversarial networks"
    - "wild patterns ten years after the rise of adversarial machine learning"
    - "cyberattack detection using deep generative models with variational inference"
    - "kitsune an ensemble of autoencoders for online network intrusion detection"
    - "adversarial regression for detecting attacks in cyber physical systems"
    - "anomaly detection for a water treatment system using unsupervised machine learning"
    - "stealthy deception attacks against scada systems"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)