Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Attacking and Defending Machine Learning Applications of Public Cloud   Adversarial attack breaks the boundaries of traditional security defense. For
adversarial attack and the characteristics of cloud services, we propose
Security Development Lifecycle for Machine Learning applications, e.g., SDL for
ML. The SDL for ML helps developers build more secure software by reducing the
number and severity of vulnerabilities in ML-as-a-service, while reducing
development cost.

6
The categories of this paper are: astro-ph
34
The categories of this paper are: chem-ph
29
The categories of this paper are: funct-an
8
The categories of this paper are: hep-ex
18
The categories of this paper are: econ
20
The categories of this paper are: acc-phys
25
The categories of this paper are: patt-sol
23
The categories of this paper are: solv-int
24
The categories of this paper are: dg-ga
4
The categories of this paper are: cond-mat
26
The categories of this paper are: bayes-an
37
The categories of this paper are: supr-con
10
The categories of this paper are: q-bio
14
The categories of this paper are: math-ph
21
The categories of this paper are: adap-org
27
The categories of this paper are: comp-gas