human: Given a node-centered hypergraph: <hypergraph>, where nodes represent papers and hyperedges represent sets of papers co-cited by a source paper.

Details of the hypergraph:
Center node: "gazelle a low latency framework for secure neural network inference"
  Abstract: The growing popularity of cloud-based machine learning raises a natural question about the privacy guarantees that can be provided in such a setting. Our work tackles this problem in the context where a client wishes to classify private images using a convolutional neural network (CNN) trained by a server. Our goal is to build efficient protocols whereby the client can acquire the classification result without revealing their input to the server, while guaranteeing the privacy of the server's neural network. #R##N#To this end, we design Gazelle, a scalable and low-latency system for secure neural network inference, using an intricate combination of homomorphic encryption and traditional two-party computation techniques (such as garbled circuits). Gazelle makes three contributions. First, we design the Gazelle homomorphic encryption library which provides fast algorithms for basic homomorphic operations such as SIMD (single instruction multiple data) addition, SIMD multiplication and ciphertext permutation. Second, we implement the Gazelle homomorphic linear algebra kernels which map neural network layers to optimized homomorphic matrix-vector multiplication and convolution routines. Third, we design optimized encryption switching protocols which seamlessly convert between homomorphic and garbled circuit encodings to enable implementation of complete neural network inference. #R##N#We evaluate our protocols on benchmark neural networks trained on the MNIST and CIFAR-10 datasets and show that Gazelle outperforms the best existing systems such as MiniONN (ACM CCS 2017) by 20 times and Chameleon (Crypto Eprint 2017/1164) by 30 times in online runtime. Similarly when compared with fully homomorphic approaches like CryptoNets (ICML 2016) we demonstrate three orders of magnitude faster online run-time.

Connected through hyperedge HE-1 (induced by source paper "deep quaternion features for privacy protection"):
  with members:
    - "adversarial neural network inversion via auxiliary knowledge alignment"
    - "complex valued neural networks for privacy protection"
    - "interpretable complex valued neural networks for privacy protection"
    - "quaternion convolutional neural networks"
    - "privynet a flexible framework for privacy preserving deep neural network training"
    - "exploiting unintended feature leakage in collaborative learning"
    - "not just privacy improving performance of private deep learning in mobile cloud"
    - "deep complex networks"

Connected through hyperedge HE-2 (induced by source paper "nass optimizing secure inference via neural architecture search"):
  with members:
    - "video action recognition via neural architecture searching"
    - "hardware software co exploration of neural architectures"
    - "accuracy vs efficiency achieving both through fpga implementation aware neural architecture search"
    - "auto deeplab hierarchical neural architecture search for semantic image segmentation"
    - "on neural architecture search for resource constrained hardware platforms"
    - "device circuit architecture co exploration for computing in memory neural accelerators"
    - "xonn xnor based oblivious deep neural network inference"
    - "prada protecting against dnn model stealing attacks"

Connected through hyperedge HE-3 (induced by source paper "ensei efficient secure inference via frequency domain homomorphic convolution for privacy preserving visual recognition"):
  with members:
    - "privacy preserving image based localization"
    - "xonn xnor based oblivious deep neural network inference"
    - "towards privacy preserving visual recognition via adversarial training a pilot study"
    - "low latency privacy preserving inference"
    - "stealing hyperparameters in machine learning"
    - "faster cryptonets leveraging sparsity for real world encrypted inference"
    - "deepsecure scalable provably secure deep learning"
    - "binarized neural networks training deep neural networks with weights and activations constrained to 1 or 1"

Connected through hyperedge HE-4 (induced by source paper "optimizing privacy preserving outsourced convolutional neural network predictions"):
  with members:
    - "xonn xnor based oblivious deep neural network inference"
    - "chiron privacy preserving machine learning as a service"
    - "adversarial examples that fool both computer vision and time limited humans"
    - "turning your weakness into a strength watermarking deep neural networks by backdooring"
    - "ml leaks model and data independent membership inference attacks and defenses on machine learning models"
    - "attriguard a practical defense against attribute inference attacks via adversarial machine learning"
    - "logan membership inference attacks against generative models"
    - "deepsecure scalable provably secure deep learning"

Connected through hyperedge HE-5 (induced by source paper "cryptospn privacy preserving sum product network inference"):
  with members:
    - "spflow an easy and extensible library for deep probabilistic learning using sum product networks"
    - "sgxpectre stealing intel secrets from sgx enclaves via speculative execution"
    - "on relaxing determinism in arithmetic circuits"
    - "on the relationship between sum product networks and bayesian networks"
    - "sum product networks a new deep architecture"

Connected through hyperedge HE-6 (induced by source paper "survey of attacks and defenses on edge deployed neural networks"):
  with members:
    - "tensorflow js machine learning for the web and beyond"
    - "bit flip attack crushing neural network with progressive bit search"
    - "xonn xnor based oblivious deep neural network inference"
    - "deeplaser practical fault attack on deep neural networks"
    - "knockoff nets stealing functionality of black box models"
    - "cache telepathy leveraging shared resource attacks to learn dnn architectures"
    - "mlcapsule guarded offline deployment of machine learning as a service"
    - "the secret sharer measuring unintended neural network memorization extracting secrets"

Connected through hyperedge HE-7 (induced by source paper "ai enabling technologies a survey"):
  with members:
    - "the lustre storage architecture"
    - "qiniu submission to activitynet challenge 2018"
    - "moments in time dataset one million videos for event understanding"
    - "interactive supercomputing on 40 000 cores for machine learning and data analysis"
    - "this looks like that deep learning for interpretable image recognition"
    - "tracking emerges by colorizing videos"
    - "robust physical world attacks on deep learning models"
    - "adversarial examples are not easily detected bypassing ten detection methods"

Connected through hyperedge HE-8 (induced by source paper "making targeted black box evasion attacks effective and efficient"):
  with members:
    - "copy and paste a simple but effective initialization method for black box adversarial attacks"
    - "reducing adversarial example transferability using gradient regularization"
    - "autozoom autoencoder based zeroth order optimization method for attacking black box neural networks"
    - "model reuse attacks on deep learning systems"
    - "on the suitability of l_p norms for creating and preventing adversarial examples"
    - "query efficient black box attack by active learning"
    - "prada protecting against dnn model stealing attacks"
    - "genattack practical black box attacks with gradient free optimization"

Question: Please tell me which class the center node belongs to. The 40 classes are: cs.NA(Numerical Analysis), cs.MM(Multimedia), cs.LO(Logic in Computer Science), cs.CY(Computers and Society), cs.CR(Cryptography and Security), cs.DC(Distributed, Parallel, and Cluster Computing), cs.HC(Human-Computer Interaction), cs.CE(Computational Engineering, Finance, and Science), cs.NI(Networking and Internet Architecture), cs.CC(Computational Complexity), cs.AI(Artificial Intelligence), cs.MA(Multiagent Systems), cs.GL(General Literature), cs.NE(Neural and Evolutionary Computing), cs.SC(Symbolic Computation), cs.AR(Hardware Architecture), cs.CV(Computer Vision and Pattern Recognition), cs.GR(Graphics), cs.ET(Emerging Technologies), cs.SY(Systems and Control), cs.CG(Computational Geometry), cs.OH(Other Computer Science), cs.PL(Programming Languages), cs.SE(Software Engineering), cs.LG(Machine Learning), cs.SD(Sound), cs.SI(Social and Information Networks), cs.RO(Robotics), cs.IT(Information Theory), cs.PF(Performance), cs.CL(Computation and Language), cs.IR(Information Retrieval), cs.MS(Mathematical Software), cs.FL(Formal Languages and Automata Theory), cs.DS(Data Structures and Algorithms), cs.OS(Operating Systems), cs.GT(Computer Science and Game Theory), cs.DB(Databases), cs.DL(Digital Libraries), cs.DM(Discrete Mathematics). Directly output the class name.

gpt: cs.CR(Cryptography and Security)