human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "excessive invariance causes adversarial vulnerability"
  Abstract: Despite their impressive performance, deep neural networks exhibit striking failures on out-of-distribution inputs. One core idea of adversarial example research is to reveal neural network errors under such distribution shifts. We decompose these errors into two complementary sources: sensitivity and invariance. We show deep networks are not only too sensitive to task-irrelevant changes of their input, as is well-known from epsilon-adversarial examples, but are also too invariant to a wide range of task-relevant changes, thus making vast regions in input space vulnerable to adversarial attacks. We show such excessive invariance occurs across various tasks and architecture types. On MNIST and ImageNet one can manipulate the class-specific content of almost any image without changing the hidden activations. We identify an insufficiency of the standard cross-entropy loss as a reason for these failures. Further, we extend this objective based on an information-theoretic analysis so it encourages the model to consider all task-dependent features in its decision. This provides the first approach tailored explicitly to overcome excessive invariance and resulting vulnerabilities.

Connected through hyperedge HE-1 (induced by source paper "out of distribution generalization via risk extrapolation rex"):
  with members:
    - "one pixel attack for fooling deep neural networks"
    - "achieving robustness in the wild via adversarial mixing with disentangled representations"
    - "domain generalization by solving jigsaw puzzles"
    - "benchmarking neural network robustness to common corruptions and perturbations"
    - "learning robust representations by projecting superficial statistics out"
    - "do imagenet classifiers generalize to imagenet"
    - "a closer look at few shot classification"
    - "a fourier perspective on model robustness in computer vision"

Connected through hyperedge HE-2 (induced by source paper "fundamental tradeoffs between invariance and sensitivity to adversarial perturbations"):
  with members:
    - "adversarial training and robustness for multiple perturbations"
    - "procedural noise adversarial examples for black box attacks on deep convolutional networks"
    - "adversarial perceptual ad blocking meets adversarial machine learning"
    - "testing robustness against unforeseen adversaries"
    - "a fourier perspective on model robustness in computer vision"
    - "towards stable and efficient training of verifiably robust neural networks"
    - "towards the first adversarially robust neural network model on mnist"
    - "defense gan protecting classifiers against adversarial attacks using generative models"

Connected through hyperedge HE-3 (induced by source paper "guess first to enable better compression and adversarial robustness"):
  with members:
    - "extracting robust and accurate features via a robust information bottleneck"
    - "complement objective training"
    - "sparse dnns with improved adversarial robustness"
    - "towards the first adversarially robust neural network model on mnist"
    - "defense gan protecting classifiers against adversarial attacks using generative models"
    - "obfuscated gradients give a false sense of security circumventing defenses to adversarial examples"
    - "threat of adversarial attacks on deep learning in computer vision a survey"
    - "information theoretic analysis of generalization capability of learning algorithms"

Connected through hyperedge HE-4 (induced by source paper "exact information bottleneck with invertible neural networks getting the best of discriminative and generative modeling"):
  with members:
    - "conditional generative models are not robust"
    - "hexagan generative adversarial nets for real world classification"
    - "sum of squares polynomial flow"
    - "flow improving flow based generative models with variational dequantization and architecture design"
    - "hybrid models with deep and invertible features"
    - "guided image generation with conditional invertible neural networks"
    - "invertible residual networks"
    - "mine mutual information neural estimation"

Connected through hyperedge HE-5 (induced by source paper "understanding the limitations of conditional generative models"):
  with members:
    - "hybrid models with deep and invertible features"
    - "semi supervised learning with normalizing flows"
    - "are generative classifiers more robust to adversarial attacks"
    - "towards the first adversarially robust neural network model on mnist"
    - "darccc detecting adversaries by reconstruction from class conditional capsules"
    - "i revnet deep invertible networks"
    - "threat of adversarial attacks on deep learning in computer vision a survey"
    - "adversarial examples are not easily detected bypassing ten detection methods"

Connected through hyperedge HE-6 (induced by source paper "investigating generalization in neural networks under optimally evolved training perturbations"):
  with members:
    - "adaptive gradient methods with dynamic bound of learning rate"
    - "built in vulnerabilities to imperceptible adversarial perturbations"
    - "recurrent world models facilitate policy evolution"
    - "certified defenses for data poisoning attacks"
    - "sharp minima can generalize for deep nets"
    - "improving generalization performance by switching from adam to sgd"
    - "towards poisoning of deep learning algorithms with back gradient optimization"
    - "understanding deep learning requires rethinking generalization"

Connected through hyperedge HE-7 (induced by source paper "rearchitecting classification frameworks for increased robustness"):
  with members:
    - "adversarial sensor attack on lidar based perception in autonomous driving"
    - "extending adversarial attacks and defenses to deep 3d point cloud classifiers"
    - "certified adversarial robustness via randomized smoothing"
    - "a stratified approach to robustness for randomly smoothed classifiers"
    - "humans can decipher adversarial images"
    - "exploiting excessive invariance caused by norm bounded adversarial robustness"
    - "on evaluating adversarial robustness"
    - "stochastic activation pruning for robust adversarial defense"

Connected through hyperedge HE-8 (induced by source paper "defense against adversarial attacks using feature scattering based adversarial training"):
  with members:
    - "one pixel attack for fooling deep neural networks"
    - "joint adversarial training incorporating both spatial and pixel attacks"
    - "towards adversarially robust object detection"
    - "defense against adversarial images using web scale nearest neighbor search"
    - "wild patterns ten years after the rise of adversarial machine learning"
    - "adversarial patch"
    - "feature denoising for improving adversarial robustness"
    - "adversarial logit pairing"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)