human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "poison frogs targeted clean label poisoning attacks on neural networks"
  Abstract: Data poisoning is a type of adversarial attack on machine learning models wherein the attacker adds examples to the training set to manipulate the behavior of the model at test time. This paper explores a broad class of poisoning attacks on neural nets. The proposed attacks use "clean-labels"; they don't require the attacker to have any control over the labeling of training data. They are also targeted; they control the behavior of the classifier on a specific test instance without noticeably degrading classifier performance on other instances. #R##N#For example, an attacker could add a seemingly innocuous image (that is properly labeled) to a training set for a face recognition engine, and control the identity of a chosen person at test time. Because the attacker does not need to control the labeling function, poisons could be entered into the training set simply by putting them online and waiting for them to be scraped by a data collection bot. #R##N#We present an optimization-based method for crafting poisons, and show that just one single poison image can control classifier behavior when transfer learning is used. For full end-to-end training, we present a "watermarking" strategy that makes poisoning reliable using multiple (~50) poisoned training instances. We demonstrate our method by generating poisoned frog images from the CIFAR dataset and using them to manipulate image classifiers.

Connected through hyperedge HE-1 (induced by source paper "humpty dumpty controlling word meanings via corpus poisoning"):
  with members:
    - "towards a robust deep neural network in text domain a survey"
    - "universal adversarial triggers for attacking and analyzing nlp"
    - "cross lingual alignment of contextual word embeddings with applications to zero shot dependency parsing"
    - "understanding the origins of bias in word embeddings"
    - "adversarial attacks on node embeddings via graph poisoning"
    - "black box generation of adversarial text sequences to evade deep learning classifiers"
    - "deep text classification can be fooled"
    - "towards understanding linear word analogies"

Connected through hyperedge HE-2 (induced by source paper "fawkes protecting personal privacy against unauthorized deep learning models"):
  with members:
    - "strong baseline defenses against clean label poisoning attacks"
    - "anonymousnet natural face de identification with measurable privacy"
    - "hiding faces in plain sight disrupting ai face synthesis with adversarial perturbations"
    - "fooling automated surveillance cameras adversarial patches to attack person detection"
    - "making an invisibility cloak real world adversarial attacks on object detectors"
    - "advhat real world adversarial attack on arcface face id system"
    - "using honeypots to catch adversarial attacks on neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"

Connected through hyperedge HE-3 (induced by source paper "certified robustness to label flipping attacks via randomized smoothing"):
  with members:
    - "tight certificates of adversarial robustness for randomly smoothed classifiers"
    - "on defending against label flipping attacks on malware detection systems"
    - "certified adversarial robustness via randomized smoothing"
    - "provably robust deep learning via adversarially trained smoothed classifiers"
    - "compressed sensing with adversarial sparse noise via l1 regression"
    - "learning with bad training data via iterative trimmed loss minimization"
    - "efficient algorithms and lower bounds for robust linear regression"
    - "representer point selection for explaining deep neural networks"

Connected through hyperedge HE-4 (induced by source paper "rab provable robustness against backdoor attacks"):
  with members:
    - "dynamic backdoor attacks against machine learning models"
    - "backdoor attacks against transfer learning with pre trained deep learning models"
    - "provable robust learning based on transformation specific smoothing"
    - "on certifying robustness against backdoor attacks via randomized smoothing"
    - "certified robustness to label flipping attacks via randomized smoothing"
    - "certified adversarial robustness via randomized smoothing"
    - "strip a defence against trojan attacks on deep neural networks"
    - "detecting backdoor attacks on deep neural networks by activation clustering"

Connected through hyperedge HE-5 (induced by source paper "threats to federated learning a survey"):
  with members:
    - "fedvision an online visual object detection platform powered by federated learning"
    - "idlg improved deep leakage from gradients"
    - "advances and open problems in federated learning"
    - "deep leakage from gradients"
    - "towards fair and decentralized privacy preserving deep learning with blockchain"
    - "federated learning challenges methods and future directions"
    - "federated machine learning concept and applications"
    - "analyzing federated learning through an adversarial lens"

Connected through hyperedge HE-6 (induced by source paper "on the effectiveness of mitigating data poisoning attacks with gradient shaping"):
  with members:
    - "data poisoning against differentially private learners attacks and defenses"
    - "evaluating differentially private machine learning in practice"
    - "analyzing federated learning through an adversarial lens"
    - "byzantine robust distributed learning towards optimal statistical rates"
    - "sever a robust meta algorithm for stochastic optimization"
    - "manipulating machine learning poisoning attacks and countermeasures for regression learning"
    - "is feature selection secure against training data poisoning"
    - "how to backdoor federated learning"

Connected through hyperedge HE-7 (induced by source paper "to transfer or not to transfer misclassification attacks against transfer learned text classifiers"):
  with members:
    - "towards a robust deep neural network in text domain a survey"
    - "textbugger generating adversarial text against real world applications"
    - "black box generation of adversarial text sequences to evade deep learning classifiers"
    - "taskonomy disentangling task transfer learning"
    - "deep text classification can be fooled"
    - "generating natural language adversarial examples"
    - "fine tuned language models for text classification"
    - "bert pre training of deep bidirectional transformers for language understanding"

Connected through hyperedge HE-8 (induced by source paper "query efficient physical hard label attacks on deep learning visual classification"):
  with members:
    - "sign opt a query efficient hard label adversarial attack"
    - "hopskipjumpattack a query efficient decision based attack"
    - "adversarial patch"
    - "black box adversarial attacks with limited queries and information"
    - "synthesizing robust adversarial examples"
    - "targeted backdoor attacks on deep learning systems using data poisoning"
    - "transferability in machine learning from phenomena to black box attacks using adversarial samples"
    - "delving into transferable adversarial examples and black box attacks"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.LG(Machine Learning)