human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "backdooring convolutional neural networks via targeted weight perturbations"
  Abstract: We present a new type of backdoor attack that exploits a vulnerability of convolutional neural networks (CNNs) that has been previously unstudied. In particular, we examine the application of facial recognition. Deep learning techniques are at the top of the game for facial recognition, which means they have now been implemented in many production-level systems. Alarmingly, unlike other commercial technologies such as operating systems and network devices, deep learning-based facial recognition algorithms are not presently designed with security requirements or audited for security vulnerabilities before deployment. Given how young the technology is and how abstract many of the internal workings of these algorithms are, neural network-based facial recognition systems are prime targets for security breaches. As more and more of our personal information begins to be guarded by facial recognition (e.g., the iPhone X), exploring the security vulnerabilities of these systems from a penetration testing standpoint is crucial. Along these lines, we describe a general methodology for backdooring CNNs via targeted weight perturbations. Using a five-layer CNN and ResNet-50 as case studies, we show that an attacker is able to significantly increase the chance that inputs they supply will be falsely accepted by a CNN while simultaneously preserving the error rates for legitimate enrolled classes.

Connected through hyperedge HE-1 (induced by source paper "rab provable robustness against backdoor attacks"):
  with members:
    - "dynamic backdoor attacks against machine learning models"
    - "backdoor attacks against transfer learning with pre trained deep learning models"
    - "provable robust learning based on transformation specific smoothing"
    - "on certifying robustness against backdoor attacks via randomized smoothing"
    - "certified robustness to label flipping attacks via randomized smoothing"
    - "certified adversarial robustness via randomized smoothing"
    - "strip a defence against trojan attacks on deep neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"

Connected through hyperedge HE-2 (induced by source paper "detecting ai trojans using meta neural analysis"):
  with members:
    - "strip a defence against trojan attacks on deep neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"
    - "exploiting unintended feature leakage in collaborative learning"
    - "fine pruning defending against backdooring attacks on deep neural networks"
    - "mobilenetv2 inverted residuals and linear bottlenecks"
    - "sentinet detecting physical attacks against deep learning systems"
    - "turning your weakness into a strength watermarking deep neural networks by backdooring"
    - "speech commands a dataset for limited vocabulary speech recognition"

Connected through hyperedge HE-3 (induced by source paper "shielding collaborative learning mitigating poisoning attacks through client side detection"):
  with members:
    - "analyzing federated learning through an adversarial lens"
    - "fine pruning defending against backdooring attacks on deep neural networks"
    - "model reuse attacks on deep learning systems"
    - "federated learning strategies for improving communication efficiency"
    - "privacy preserving collaborative deep learning with unreliable participants"
    - "byzantine robust distributed learning towards optimal statistical rates"
    - "how to backdoor federated learning"
    - "mitigating sybils in federated learning poisoning"

Connected through hyperedge HE-4 (induced by source paper "hacking neural networks a short introduction"):
  with members:
    - "deep leakage from gradients"
    - "iris verification with convolutional neural network and unit circle layer"
    - "adversarial attacks and defences competition"
    - "fine pruning defending against backdooring attacks on deep neural networks"
    - "invisible mask practical attacks on face recognition with infrared"
    - "microsoft malware classification challenge"
    - "a survey of techniques for improving security of gpus"
    - "robust physical world attacks on deep learning models"

Connected through hyperedge HE-5 (induced by source paper "programmable neural network trojan for pre trained feature extractor"):
  with members:
    - "mobilenetv2 inverted residuals and linear bottlenecks"
    - "backdoor embedding in convolutional neural network models via invisible perturbation"
    - "badnets identifying vulnerabilities in the machine learning model supply chain"
    - "adversarial examples in the physical world"
    - "unsupervised representation learning with deep convolutional generative adversarial networks"
    - "deep residual learning for image recognition"
    - "going deeper with convolutions"
    - "very deep convolutional networks for large scale image recognition"

Connected through hyperedge HE-6 (induced by source paper "how to backdoor federated learning"):
  with members:
    - "strip a defence against trojan attacks on deep neural networks"
    - "towards federated learning at scale system design"
    - "contamination attacks and mitigation in multi party machine learning"
    - "a little is enough circumventing defenses for distributed learning"
    - "distributed training with heterogeneous data bridging median and mean based algorithms"
    - "detecting backdoor attacks on deep neural networks by activation clustering"
    - "analyzing federated learning through an adversarial lens"
    - "fine pruning defending against backdooring attacks on deep neural networks"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CV(Computer Vision and Pattern Recognition)