human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "parametric noise injection trainable randomness to improve deep neural network robustness against adversarial attack"
  Abstract: Recent development in the field of Deep Learning have exposed the underlying vulnerability of Deep Neural Network (DNN) against adversarial examples. In image classification, an adversarial example is a carefully modified image that is visually imperceptible to the original image but can cause DNN model to misclassify it. Training the network with Gaussian noise is an effective technique to perform model regularization, thus improving model robustness against input variation. Inspired by this classical method, we explore to utilize the regularization characteristic of noise injection to improve DNN's robustness against adversarial attack. In this work, we propose Parametric-Noise-Injection (PNI) which involves trainable Gaussian noise injection at each layer on either activation or weights through solving the min-max optimization problem, embedded with adversarial training. These parameters are trained explicitly to achieve improved robustness. To the best of our knowledge, this is the first work that uses trainable noise injection to improve network robustness against adversarial attacks, rather than manually configuring the injected noise level through cross-validation. The extensive results show that our proposed PNI technique effectively improves the robustness against a variety of powerful white-box and black-box attacks such as PGD, C & W, FGSM, transferable attack and ZOO attack. Last but not the least, PNI method improves both clean- and perturbed-data accuracy in comparison to the state-of-the-art defense methods, which outperforms current unbroken PGD defense by 1.1 % and 6.8 % on clean test data and perturbed test data respectively using Resnet-20 architecture.

Connected through hyperedge HE-1 (induced by source paper "adversarial perturbations prevail in the y channel of the ycbcr color space"):
  with members:
    - "jumprelu a retrofit defense strategy for adversarial attacks"
    - "an empirical investigation of randomized defenses against adversarial attacks"
    - "robust neural networks using randomized adversarial training"
    - "certified adversarial robustness via randomized smoothing"
    - "deep learning for single image super resolution a brief review"
    - "deep learning for multiple image super resolution"
    - "sampling and super resolution of sparse signals beyond the fourier domain"
    - "deep learning for image super resolution a survey"

Connected through hyperedge HE-2 (induced by source paper "deep neural network perception models and robust autonomous driving systems"):
  with members:
    - "std sparse to dense 3d object detector for point cloud"
    - "one pixel attack for fooling deep neural networks"
    - "self driving cars a survey"
    - "adversarially robust distillation"
    - "improving adversarial robustness via promoting ensemble diversity"
    - "a survey of autonomous driving common practices and emerging technologies"
    - "panoptic deeplab a simple strong and fast baseline for bottom up panoptic segmentation"
    - "training of convolutional networks on multiple heterogeneous datasets for street scene semantic segmentation"

Connected through hyperedge HE-3 (induced by source paper "an empirical evaluation of perturbation based defenses"):
  with members:
    - "certified adversarial robustness via randomized smoothing"
    - "the odds are odd a statistical test for detecting adversarial examples"
    - "defending against whitebox adversarial attacks via randomized discretization"
    - "ppd permutation phase defense against adversarial examples in deep learning"
    - "feature distillation dnn oriented jpeg compression against adversarial examples"
    - "hessian based analysis of large batch training and robustness to adversaries"
    - "the effects of jpeg and jpeg2000 compression on attacks using adversarial examples"
    - "deflecting adversarial attacks with pixel deflection"

Connected through hyperedge HE-4 (induced by source paper "strategy to increase the safety of a dnn based perception for had systems"):
  with members:
    - "self ensembling with gan based data augmentation for domain adaptation in semantic segmentation"
    - "adversarial camera stickers a physical camera based attack on deep learning systems"
    - "sampling free epistemic uncertainty estimation using approximated variance propagation"
    - "the ethical dilemma when not setting up cost based decision rules in semantic segmentation"
    - "prediction error meta classification in semantic segmentation detection via aggregated dispersion measures of softmax probabilities"
    - "an overview of deep learning based methods for unsupervised and semi supervised anomaly detection in videos"
    - "autoaugment learning augmentation policies from data"
    - "searching for efficient multi scale architectures for dense image prediction"

Connected through hyperedge HE-5 (induced by source paper "noisy machines understanding noisy neural networks and enhancing robustness to analog hardware errors using distillation"):
  with members:
    - "zero shot knowledge transfer via adversarial belief matching"
    - "adversarially robust distillation"
    - "accurate deep neural network inference using computational phase change memory"
    - "fixynn efficient hardware for mobile computer vision via transfer learning"
    - "neuromorphic computing with multi memristive synapses"
    - "mixed precision in memory computing"
    - "all optical machine learning using diffractive deep neural networks"
    - "model compression via distillation and quantization"

Connected through hyperedge HE-6 (induced by source paper "improving generalization and robustness with noisy collaboration in knowledge distillation"):
  with members:
    - "using videos to evaluate image model robustness"
    - "deep self learning from noisy labels"
    - "symmetric cross entropy for robust learning with noisy labels"
    - "simple and effective regularization methods for training on noisily labeled data with generalization guarantee"
    - "certified adversarial robustness via randomized smoothing"
    - "when does label smoothing help"
    - "natural adversarial examples"
    - "on the sensitivity of adversarial robustness to input data distributions"

Connected through hyperedge HE-7 (induced by source paper "theoretical evidence for adversarial robustness through randomization"):
  with members:
    - "certified adversarial robustness via randomized smoothing"
    - "on evaluating adversarial robustness"
    - "defense gan protecting classifiers against adversarial attacks using generative models"
    - "adversarial vulnerability for any classifier"
    - "adversarial risk and robustness general definitions and implications for the uniform distribution"
    - "obfuscated gradients give a false sense of security circumventing defenses to adversarial examples"
    - "magnet a two pronged defense against adversarial examples"
    - "the effectiveness of data augmentation in image classification using deep learning"

Connected through hyperedge HE-8 (induced by source paper "robust sparse regularization simultaneously optimizing neural network robustness and compactness"):
  with members:
    - "adversarial robustness vs model compression or both"
    - "defensive quantization when efficiency meets robustness"
    - "sparse dnns with improved adversarial robustness"
    - "stochastic activation pruning for robust adversarial defense"
    - "defense gan protecting classifiers against adversarial attacks using generative models"
    - "structured pruning for efficient convnets via incremental regularization"
    - "certified defenses against adversarial examples"
    - "defend deep neural networks against adversarial examples via fixed anddynamic quantized activation functions"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)