@inproceedings{DBLP:conf/sp/HuWDX24,
  author       = {Hongsheng Hu and
                  Shuo Wang and
                  Tian Dong and
                  Minhui Xue},
  title        = {Learn What You Want to Unlearn: Unlearning Inversion Attacks against
                  Machine Unlearning},
  booktitle    = {{IEEE} Symposium on Security and Privacy, {SP} 2024, San Francisco,
                  CA, USA, May 19-23, 2024},
  pages        = {3257--3275},
  publisher    = {{IEEE}},
  year         = {2024},
  doi          = {10.1109/SP54263.2024.00248},
  timestamp    = {Wed, 16 Oct 2024 16:36:24 +0200},
  biburl       = {https://dblp.org/rec/conf/sp/HuWDX24.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@INPROCEEDINGS{7958568,
  author={Shokri, Reza and Stronati, Marco and Song, Congzheng and Shmatikov, Vitaly},
  booktitle={2017 IEEE Symposium on Security and Privacy (SP)}, 
  title={Membership Inference Attacks Against Machine Learning Models}, 
  year={2017},
  volume={},
  number={},
  pages={3-18},
  keywords={Training;Data models;Predictive models;Privacy;Sociology;Statistics;Google},
  doi={10.1109/SP.2017.41}}

@inproceedings{DBLP:conf/cvpr/HeZRS16,
  author       = {Kaiming He and
                  Xiangyu Zhang and
                  Shaoqing Ren and
                  Jian Sun},
  title        = {Deep Residual Learning for Image Recognition},
  booktitle    = {2016 {IEEE} Conference on Computer Vision and Pattern Recognition,
                  {CVPR} 2016, Las Vegas, NV, USA, June 27-30, 2016},
  pages        = {770--778},
  publisher    = {{IEEE} Computer Society},
  year         = {2016},
  doi          = {10.1109/CVPR.2016.90},
  timestamp    = {Fri, 24 Mar 2023 00:02:57 +0100},
  biburl       = {https://dblp.org/rec/conf/cvpr/HeZRS16.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/iclr/DosovitskiyB0WZ21,
  author       = {Alexey Dosovitskiy and
                  Lucas Beyer and
                  Alexander Kolesnikov and
                  Dirk Weissenborn and
                  Xiaohua Zhai and
                  Thomas Unterthiner and
                  Mostafa Dehghani and
                  Matthias Minderer and
                  Georg Heigold and
                  Sylvain Gelly and
                  Jakob Uszkoreit and
                  Neil Houlsby},
  title        = {An Image is Worth 16x16 Words: Transformers for Image Recognition
                  at Scale},
  booktitle    = {9th International Conference on Learning Representations, {ICLR} 2021,
                  Virtual Event, Austria, May 3-7, 2021},
  publisher    = {OpenReview.net},
  year         = {2021},
  timestamp    = {Wed, 23 Jun 2021 17:36:39 +0200},
  biburl       = {https://dblp.org/rec/conf/iclr/DosovitskiyB0WZ21.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/nips/BrownMRSKDNSSAA20,
  author       = {Tom B. Brown and
                  Benjamin Mann and
                  Nick Ryder and
                  Melanie Subbiah and
                  Jared Kaplan and
                  Prafulla Dhariwal and
                  Arvind Neelakantan and
                  Pranav Shyam and
                  Girish Sastry and
                  Amanda Askell and
                  Sandhini Agarwal and
                  Ariel Herbert{-}Voss and
                  Gretchen Krueger and
                  Tom Henighan and
                  Rewon Child and
                  Aditya Ramesh and
                  Daniel M. Ziegler and
                  Jeffrey Wu and
                  Clemens Winter and
                  Christopher Hesse and
                  Mark Chen and
                  Eric Sigler and
                  Mateusz Litwin and
                  Scott Gray and
                  Benjamin Chess and
                  Jack Clark and
                  Christopher Berner and
                  Sam McCandlish and
                  Alec Radford and
                  Ilya Sutskever and
                  Dario Amodei},
  title        = {Language Models are Few-Shot Learners},
  booktitle    = {Advances in Neural Information Processing Systems 33: Annual Conference
                  on Neural Information Processing Systems 2020, NeurIPS 2020, December
                  6-12, 2020, virtual},
  year         = {2020},
  timestamp    = {Thu, 25 May 2023 10:38:31 +0200},
  biburl       = {https://dblp.org/rec/conf/nips/BrownMRSKDNSSAA20.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{radford2019language,
  title={Language models are unsupervised multitask learners},
  author={Radford, Alec and Wu, Jeffrey and Child, Rewon and Luan, David and Amodei, Dario and Sutskever, Ilya and others},
  journal={OpenAI blog},
  volume={1},
  number={8},
  pages={9},
  year={2019}
}

@article{DBLP:journals/corr/abs-2303-08774,
  author       = {OpenAI},
  title        = {{GPT-4} Technical Report},
  journal      = {CoRR},
  volume       = {abs/2303.08774},
  year         = {2023},
  doi          = {10.48550/ARXIV.2303.08774},
  eprinttype    = {arXiv},
  eprint       = {2303.08774},
  timestamp    = {Mon, 28 Aug 2023 21:26:19 +0200},
  biburl       = {https://dblp.org/rec/journals/corr/abs-2303-08774.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/icml/RadfordKXBMS23,
  author       = {Alec Radford and
                  Jong Wook Kim and
                  Tao Xu and
                  Greg Brockman and
                  Christine McLeavey and
                  Ilya Sutskever},
  title        = {Robust Speech Recognition via Large-Scale Weak Supervision},
  booktitle    = {International Conference on Machine Learning, {ICML} 2023, 23-29 July
                  2023, Honolulu, Hawaii, {USA}},
  series       = {Proceedings of Machine Learning Research},
  volume       = {202},
  pages        = {28492--28518},
  publisher    = {{PMLR}},
  year         = {2023},
  timestamp    = {Mon, 28 Aug 2023 17:23:08 +0200},
  biburl       = {https://dblp.org/rec/conf/icml/RadfordKXBMS23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/nips/BaevskiZMA20,
  author       = {Alexei Baevski and
                  Yuhao Zhou and
                  Abdelrahman Mohamed and
                  Michael Auli},
  title        = {wav2vec 2.0: {A} Framework for Self-Supervised Learning of Speech
                  Representations},
  booktitle    = {Advances in Neural Information Processing Systems 33: Annual Conference
                  on Neural Information Processing Systems 2020, NeurIPS 2020, December
                  6-12, 2020, virtual},
  year         = {2020},
  timestamp    = {Tue, 19 Jan 2021 15:57:22 +0100},
  biburl       = {https://dblp.org/rec/conf/nips/BaevskiZMA20.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{wu2022quantitative,
  title={On the Quantitative Analysis of Decoder-Based Generative Models},
  author={Wu, Yuhuai and Burda, Yuri and Salakhutdinov, Ruslan and Grosse, Roger},
  booktitle={International Conference on Learning Representations},
  year={2022}
}

@inproceedings{carlini2023extracting,
  title={Extracting training data from diffusion models},
  author={Carlini, Nicolas and Hayes, Jamie and Nasr, Milad and Jagielski, Matthew and Sehwag, Vikash and Tramer, Florian and Balle, Borja and Ippolito, Daphne and Wallace, Eric},
  booktitle={32nd USENIX Security Symposium (USENIX Security 23)},
  pages={5253--5270},
  year={2023}
}

@inproceedings{thudi2022unrolling,
  title={Unrolling sgd: Understanding factors influencing machine unlearning},
  author={Thudi, Anvith and Deza, Gabriel and Chandrasekaran, Varun and Papernot, Nicolas},
  booktitle={2022 IEEE 7th European Symposium on Security and Privacy (EuroS\&P)},
  pages={303--319},
  year={2022},
  organization={IEEE}
}

@article{DBLP:journals/tetci/XuWWJ24,
  author       = {Jie Xu and
                  Zihan Wu and
                  Cong Wang and
                  Xiaohua Jia},
  title        = {Machine Unlearning: Solutions and Challenges},
  journal      = {{IEEE} Trans. Emerg. Top. Comput. Intell.},
  volume       = {8},
  number       = {3},
  pages        = {2150--2168},
  year         = {2024},
  doi          = {10.1109/TETCI.2024.3379240},
  timestamp    = {Tue, 18 Jun 2024 09:26:04 +0200},
  biburl       = {https://dblp.org/rec/journals/tetci/XuWWJ24.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/sp/BourtouleCCJTZL21,
  author       = {Lucas Bourtoule and
                  Varun Chandrasekaran and
                  Christopher A. Choquette{-}Choo and
                  Hengrui Jia and
                  Adelin Travers and
                  Baiwu Zhang and
                  David Lie and
                  Nicolas Papernot},
  title        = {Machine Unlearning},
  booktitle    = {42nd {IEEE} Symposium on Security and Privacy, {SP} 2021, San Francisco,
                  CA, USA, 24-27 May 2021},
  pages        = {141--159},
  publisher    = {{IEEE}},
  year         = {2021},
  doi          = {10.1109/SP40001.2021.00019},
  timestamp    = {Thu, 21 Sep 2023 15:57:26 +0200},
  biburl       = {https://dblp.org/rec/conf/sp/BourtouleCCJTZL21.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/icml/GuoGHM20,
  author       = {Chuan Guo and
                  Tom Goldstein and
                  Awni Y. Hannun and
                  Laurens van der Maaten},
  title        = {Certified Data Removal from Machine Learning Models},
  booktitle    = {Proceedings of the 37th International Conference on Machine Learning,
                  {ICML} 2020, 13-18 July 2020, Virtual Event},
  series       = {Proceedings of Machine Learning Research},
  volume       = {119},
  pages        = {3832--3842},
  publisher    = {{PMLR}},
  year         = {2020},
  timestamp    = {Wed, 02 Oct 2024 14:40:04 +0200},
  biburl       = {https://dblp.org/rec/conf/icml/GuoGHM20.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/ijcai/YanLG0L022,
  author       = {Haonan Yan and
                  Xiaoguang Li and
                  Ziyao Guo and
                  Hui Li and
                  Fenghua Li and
                  Xiaodong Lin},
  title        = {{ARCANE:} An Efficient Architecture for Exact Machine Unlearning},
  booktitle    = {Proceedings of the Thirty-First International Joint Conference on
                  Artificial Intelligence, {IJCAI} 2022, Vienna, Austria, 23-29 July
                  2022},
  pages        = {4006--4013},
  publisher    = {ijcai.org},
  year         = {2022},
  doi          = {10.24963/IJCAI.2022/556},
  timestamp    = {Tue, 15 Oct 2024 16:43:28 +0200},
  biburl       = {https://dblp.org/rec/conf/ijcai/YanLG0L022.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@ARTICLE{10113700,
  author={Tarun, Ayush K. and Chundawat, Vikram S. and Mandal, Murari and Kankanhalli, Mohan},
  journal={IEEE Transactions on Neural Networks and Learning Systems}, 
  title={Fast Yet Effective Machine Unlearning}, 
  year={2024},
  volume={35},
  number={9},
  pages={13046-13055},
  keywords={Data models;Training;Data privacy;Deep learning;Task analysis;Privacy;Training data;Data privacy;forgetting;machine unlearning;privacy in artificial intelligence (AI)},
  doi={10.1109/TNNLS.2023.3266233}}

@inproceedings{DBLP:conf/uss/WangH023,
  author       = {Cheng{-}Long Wang and
                  Mengdi Huai and
                  Di Wang},
  title        = {Inductive Graph Unlearning},
  booktitle    = {32nd {USENIX} Security Symposium, {USENIX} Security 2023, Anaheim,
                  CA, USA, August 9-11, 2023},
  pages        = {3205--3222},
  publisher    = {{USENIX} Association},
  year         = {2023},
  timestamp    = {Sun, 04 Aug 2024 19:38:59 +0200},
  biburl       = {https://dblp.org/rec/conf/uss/WangH023.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/eurosp/ThudiDCP22,
  author       = {Anvith Thudi and
                  Gabriel Deza and
                  Varun Chandrasekaran and
                  Nicolas Papernot},
  title        = {Unrolling {SGD:} Understanding Factors Influencing Machine Unlearning},
  booktitle    = {7th {IEEE} European Symposium on Security and Privacy, EuroS{\&}P
                  2022, Genoa, Italy, June 6-10, 2022},
  pages        = {303--319},
  publisher    = {{IEEE}},
  year         = {2022},
  doi          = {10.1109/EUROSP53844.2022.00027},
  timestamp    = {Wed, 29 Jun 2022 16:03:24 +0200},
  biburl       = {https://dblp.org/rec/conf/eurosp/ThudiDCP22.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{pereira2024machine,
  title={A Machine Learning as a Service (MLaaS) Approach to Improve Marketing Success},
  author={Pereira, Ivo and Madureira, Ana and Bettencourt, Nuno and Coelho, Duarte and Rebelo, Miguel {\^A}ngelo and Ara{\'u}jo, Carolina and de Oliveira, Daniel Alves},
  booktitle={Informatics},
  volume={11},
  number={2},
  pages={19},
  year={2024},
  organization={MDPI}
}

@article{xi2023rise,
  title={The rise and potential of large language model based agents: A survey},
  author={Xi, Zhiheng and Chen, Wenxiang and Guo, Xin and He, Wei and Ding, Yiwen and Hong, Boyang and Zhang, Ming and Wang, Junzhe and Jin, Senjie and Zhou, Enyu and others},
  journal={arXiv preprint arXiv:2309.07864},
  year={2023}
}

@book{shmueli2023machine,
  title={Machine learning for business analytics: Concepts, techniques, and applications with analytic solver data mining},
  author={Shmueli, Galit and Bruce, Peter C and Deokar, Kuber R and Patel, Nitin R},
  year={2023},
  publisher={John Wiley \& Sons}
}

@inproceedings{DBLP:conf/ndss/Hu0CZ00ZX24,
  author       = {Hongsheng Hu and
                  Shuo Wang and
                  Jiamin Chang and
                  Haonan Zhong and
                  Ruoxi Sun and
                  Shuang Hao and
                  Haojin Zhu and
                  Minhui Xue},
  title        = {A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities
                  in Machine Unlearning Services},
  booktitle    = {31st Annual Network and Distributed System Security Symposium, {NDSS}
                  2024, San Diego, California, USA, February 26 - March 1, 2024},
  publisher    = {The Internet Society},
  year         = {2024},
  timestamp    = {Wed, 16 Oct 2024 16:36:24 +0200},
  biburl       = {https://dblp.org/rec/conf/ndss/Hu0CZ00ZX24.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/iclr/000100BCX24,
  author       = {Shaofei Shen and
                  Chenhao Zhang and
                  Yawen Zhao and
                  Alina Bialkowski and
                  Weitong Chen and
                  Miao Xu},
  title        = {Label-Agnostic Forgetting: {A} Supervision-Free Unlearning in Deep
                  Models},
  booktitle    = {The Twelfth International Conference on Learning Representations,
                  {ICLR} 2024, Vienna, Austria, May 7-11, 2024},
  publisher    = {OpenReview.net},
  year         = {2024},
  timestamp    = {Tue, 05 Nov 2024 10:49:38 +0100},
  biburl       = {https://dblp.org/rec/conf/iclr/000100BCX24.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}


@article{DBLP:journals/corr/abs-2409-19732,
  author       = {Zhehao Huang and
                  Xinwen Cheng and
                  JingHao Zheng and
                  Haoran Wang and
                  Zhengbao He and
                  Tao Li and
                  Xiaolin Huang},
  title        = {Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement},
  journal      = {CoRR},
  volume       = {abs/2409.19732},
  year         = {2024},
  doi          = {10.48550/ARXIV.2409.19732},
  eprinttype    = {arXiv},
  eprint       = {2409.19732},
  timestamp    = {Fri, 18 Oct 2024 09:14:22 +0200},
  biburl       = {https://dblp.org/rec/journals/corr/abs-2409-19732.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{kurmanji2024towards,
  title={Towards unbounded machine unlearning},
  author={Kurmanji, Meghdad and Triantafillou, Peter and Hayes, Jamie and Triantafillou, Eleni},
  journal={Advances in neural information processing systems},
  volume={36},
  year={2024}
}

@inproceedings{chen2023boundary,
  title={Boundary unlearning: Rapid forgetting of deep networks via shifting the decision boundary},
  author={Chen, Min and Gao, Weizhuo and Liu, Gaoyang and Peng, Kai and Wang, Chen},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={7766--7775},
  year={2023}
}

@article{DING2025103947,
title = {Membership inference attacks via spatial projection-based relative information loss in MLaaS},
journal = {Information Processing \& Management},
volume = {62},
number = {1},
pages = {103947},
year = {2025},
issn = {0306-4573},
doi = {https://doi.org/10.1016/j.ipm.2024.103947},
author = {Zehua Ding and Youliang Tian and Guorong Wang and Jinbo Xiong and Jinchuan Tang and Jianfeng Ma},
}

@INPROCEEDINGS{10426386,
  author={Nair, Adithyan M and Kumar, Akshit Sudheer and Kumar, Devakrishna Sanil and T, Anjali},
  booktitle={2023 3rd International Conference on Innovative Mechanisms for Industry Applications (ICIMIA)}, 
  title={Selective Unlearning in Face Recognition: Forgetting Faces without Compromising Accuracy}, 
  year={2023},
  volume={},
  number={},
  pages={211-216},
  keywords={Training;Privacy;Ethics;Face recognition;Surveillance;Training data;Faces;Face Recognition;Selective Unlearning;Privacy;Model Adaptation;and Recognition Accuracy},
  doi={10.1109/ICIMIA60377.2023.10426386}}

@inproceedings{DBLP:conf/ccs/DuCLOS19,
  author       = {Min Du and
                  Zhi Chen and
                  Chang Liu and
                  Rajvardhan Oak and
                  Dawn Song},
  title        = {Lifelong Anomaly Detection Through Unlearning},
  booktitle    = {Proceedings of the 2019 {ACM} {SIGSAC} Conference on Computer and
                  Communications Security, {CCS} 2019, London, UK, November 11-15, 2019},
  pages        = {1283--1297},
  publisher    = {{ACM}},
  year         = {2019},
  doi          = {10.1145/3319535.3363226},
  timestamp    = {Mon, 05 Aug 2024 08:29:03 +0200},
  biburl       = {https://dblp.org/rec/conf/ccs/DuCLOS19.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{zhou2023unified,
  title={A unified method to revoke the private data of patients in intelligent healthcare with audit to forget},
  author={Zhou, Juexiao and Li, Haoyang and Liao, Xingyu and Zhang, Bin and He, Wenjia and Li, Zhongxiao and Zhou, Longxi and Gao, Xin},
  journal={Nature Communications},
  volume={14},
  number={1},
  pages={6255},
  year={2023},
  publisher={Nature Publishing Group UK London}
}

@inproceedings{DBLP:conf/ndss/TaoXLSAX0022,
  author       = {Guanhong Tao and
                  Qiuling Xu and
                  Yingqi Liu and
                  Guangyu Shen and
                  Shengwei An and
                  Jingwei Xu and
                  Xiangyu Zhang and
                  Yuan Yao},
  title        = {{MIRROR:} Model Inversion for Deep LearningNetwork with High Fidelity},
  booktitle    = {29th Annual Network and Distributed System Security Symposium, {NDSS}
                  2022, San Diego, California, USA, April 24-28, 2022},
  publisher    = {The Internet Society},
  year         = {2022},
  timestamp    = {Tue, 29 Aug 2023 08:01:40 +0200},
  biburl       = {https://dblp.org/rec/conf/ndss/TaoXLSAX0022.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/fgr/CaoSXPZ18,
  author       = {Qiong Cao and
                  Li Shen and
                  Weidi Xie and
                  Omkar M. Parkhi and
                  Andrew Zisserman},
  title        = {VGGFace2: {A} Dataset for Recognising Faces across Pose and Age},
  booktitle    = {13th {IEEE} International Conference on Automatic Face {\&} Gesture
                  Recognition, {FG} 2018, Xi'an, China, May 15-19, 2018},
  pages        = {67--74},
  publisher    = {{IEEE} Computer Society},
  year         = {2018},
  doi          = {10.1109/FG.2018.00020},
  timestamp    = {Fri, 24 Mar 2023 00:02:48 +0100},
  biburl       = {https://dblp.org/rec/conf/fgr/CaoSXPZ18.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/cvpr/SzegedyLJSRAEVR15,
  author       = {Christian Szegedy and
                  Wei Liu and
                  Yangqing Jia and
                  Pierre Sermanet and
                  Scott E. Reed and
                  Dragomir Anguelov and
                  Dumitru Erhan and
                  Vincent Vanhoucke and
                  Andrew Rabinovich},
  title        = {Going deeper with convolutions},
  booktitle    = {{IEEE} Conference on Computer Vision and Pattern Recognition, {CVPR}
                  2015, Boston, MA, USA, June 7-12, 2015},
  pages        = {1--9},
  publisher    = {{IEEE} Computer Society},
  year         = {2015},
  doi          = {10.1109/CVPR.2015.7298594},
  timestamp    = {Sun, 06 Oct 2024 20:59:18 +0200},
  biburl       = {https://dblp.org/rec/conf/cvpr/SzegedyLJSRAEVR15.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/cvpr/KarrasLA19,
  author       = {Tero Karras and
                  Samuli Laine and
                  Timo Aila},
  title        = {A Style-Based Generator Architecture for Generative Adversarial Networks},
  booktitle    = {{IEEE} Conference on Computer Vision and Pattern Recognition, {CVPR}
                  2019, Long Beach, CA, USA, June 16-20, 2019},
  pages        = {4401--4410},
  publisher    = {Computer Vision Foundation / {IEEE}},
  year         = {2019},
  doi          = {10.1109/CVPR.2019.00453},
  timestamp    = {Mon, 30 Aug 2021 17:01:14 +0200},
  biburl       = {https://dblp.org/rec/conf/cvpr/KarrasLA19.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/iccv/LiuLWT15,
  author       = {Ziwei Liu and
                  Ping Luo and
                  Xiaogang Wang and
                  Xiaoou Tang},
  title        = {Deep Learning Face Attributes in the Wild},
  booktitle    = {2015 {IEEE} International Conference on Computer Vision, {ICCV} 2015,
                  Santiago, Chile, December 7-13, 2015},
  pages        = {3730--3738},
  publisher    = {{IEEE} Computer Society},
  year         = {2015},
  doi          = {10.1109/ICCV.2015.425},
  timestamp    = {Thu, 23 Mar 2023 23:57:43 +0100},
  biburl       = {https://dblp.org/rec/conf/iccv/LiuLWT15.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/iclr/LoshchilovH17,
  author       = {Ilya Loshchilov and
                  Frank Hutter},
  title        = {{SGDR:} Stochastic Gradient Descent with Warm Restarts},
  booktitle    = {5th International Conference on Learning Representations, {ICLR} 2017,
                  Toulon, France, April 24-26, 2017, Conference Track Proceedings},
  publisher    = {OpenReview.net},
  year         = {2017},
  timestamp    = {Thu, 25 Jul 2019 14:25:58 +0200},
  biburl       = {https://dblp.org/rec/conf/iclr/LoshchilovH17.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/nips/ChenYXBHHFZWL23,
  author       = {Ruizhe Chen and
                  Jianfei Yang and
                  Huimin Xiong and
                  Jianhong Bai and
                  Tianxiang Hu and
                  Jin Hao and
                  Yang Feng and
                  Joey Tianyi Zhou and
                  Jian Wu and
                  Zuozhu Liu},
  title        = {Fast Model DeBias with Machine Unlearning},
  booktitle    = {Advances in Neural Information Processing Systems 36: Annual Conference
                  on Neural Information Processing Systems 2023, NeurIPS 2023, New Orleans,
                  LA, USA, December 10 - 16, 2023},
  year         = {2023},
  timestamp    = {Wed, 11 Dec 2024 17:20:57 +0100},
  biburl       = {https://dblp.org/rec/conf/nips/ChenYXBHHFZWL23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{DBLP:conf/ndss/WarneckePWR23,
  author       = {Alexander Warnecke and
                  Lukas Pirch and
                  Christian Wressnegger and
                  Konrad Rieck},
  title        = {Machine Unlearning of Features and Labels},
  booktitle    = {30th Annual Network and Distributed System Security Symposium, {NDSS}
                  2023, San Diego, California, USA, February 27 - March 3, 2023},
  publisher    = {The Internet Society},
  year         = {2023},
  timestamp    = {Sat, 30 Sep 2023 09:53:53 +0200},
  biburl       = {https://dblp.org/rec/conf/ndss/WarneckePWR23.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{krizhevsky2009learning,
  title={Learning multiple layers of features from tiny images},
  author={Krizhevsky, Alex and Hinton, Geoffrey and others},
  year={2009},
  publisher={Toronto, ON, Canada}
}

@inproceedings{netzer2011reading,
  title={Reading digits in natural images with unsupervised feature learning},
  author={Netzer, Yuval and Wang, Tao and Coates, Adam and Bissacco, Alessandro and Wu, Baolin and Ng, Andrew Y and others},
  booktitle={NIPS workshop on deep learning and unsupervised feature learning},
  volume={2011},
  number={2},
  pages={4},
  year={2011},
  organization={Granada}
}

@article{le2015tiny,
  title={Tiny imagenet visual recognition challenge},
  author={Yang, Xuan},
  year={2015}
}

@inproceedings{DBLP:conf/cvpr/Liu0LYXWN000WG22,
  author       = {Ze Liu and
                  Han Hu and
                  Yutong Lin and
                  Zhuliang Yao and
                  Zhenda Xie and
                  Yixuan Wei and
                  Jia Ning and
                  Yue Cao and
                  Zheng Zhang and
                  Li Dong and
                  Furu Wei and
                  Baining Guo},
  title        = {Swin Transformer {V2:} Scaling Up Capacity and Resolution},
  booktitle    = {{IEEE/CVF} Conference on Computer Vision and Pattern Recognition,
                  {CVPR} 2022, New Orleans, LA, USA, June 18-24, 2022},
  pages        = {11999--12009},
  publisher    = {{IEEE}},
  year         = {2022},
  doi          = {10.1109/CVPR52688.2022.01170},
  timestamp    = {Mon, 05 Jun 2023 16:18:23 +0200},
  biburl       = {https://dblp.org/rec/conf/cvpr/Liu0LYXWN000WG22.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{cao2015towards,
  title={Towards making systems forget with machine unlearning},
  author={Cao, Yinzhi and Yang, Junfeng},
  booktitle={2015 IEEE symposium on security and privacy},
  pages={463--480},
  year={2015},
  organization={IEEE}
}

@article{brown2020language,
  title={Language models are few-shot learners},
  author={Brown, Tom and Mann, Benjamin and Ryder, Nick and Subbiah, Melanie and Kaplan, Jared D and Dhariwal, Prafulla and Neelakantan, Arvind and Shyam, Pranav and Sastry, Girish and Askell, Amanda and others},
  journal={Advances in neural information processing systems},
  volume={33},
  pages={1877--1901},
  year={2020}
}

@inproceedings{narayanan2021efficient,
  title={Efficient large-scale language model training on gpu clusters using megatron-lm},
  author={Narayanan, Deepak and Shoeybi, Mohammad and Casper, Jared and LeGresley, Patrick and Patwary, Mostofa and Korthikanti, Vijay and Vainbrand, Dmitri and Kashinkunti, Prethvi and Bernauer, Julie and Catanzaro, Bryan and others},
  booktitle={Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis},
  pages={1--15},
  year={2021}
}

@inproceedings{brophy2021machine,
  title={Machine unlearning for random forests},
  author={Brophy, Jonathan and Lowd, Daniel},
  booktitle={International Conference on Machine Learning},
  pages={1092--1104},
  year={2021},
  organization={PMLR}
}

@article{ginart2019making,
  title={Making ai forget you: Data deletion in machine learning},
  author={Ginart, Antonio and Guan, Melody and Valiant, Gregory and Zou, James Y},
  journal={Advances in neural information processing systems},
  volume={32},
  year={2019}
}

@inproceedings{ullah2021machine,
  title={Machine unlearning via algorithmic stability},
  author={Ullah, Enayat and Mai, Tung and Rao, Anup and Rossi, Ryan A and Arora, Raman},
  booktitle={Conference on Learning Theory},
  pages={4126--4142},
  year={2021},
  organization={PMLR}
}

@inproceedings{golatkar2020eternal,
  title={Eternal sunshine of the spotless net: Selective forgetting in deep networks},
  author={Golatkar, Aditya and Achille, Alessandro and Soatto, Stefano},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={9304--9312},
  year={2020}
}

@inproceedings{golatkar2020forgetting,
  title={Forgetting outside the box: Scrubbing deep networks of information accessible from input-output observations},
  author={Golatkar, Aditya and Achille, Alessandro and Soatto, Stefano},
  booktitle={Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part XXIX 16},
  pages={383--398},
  year={2020},
  organization={Springer}
}

@inproceedings{graves2021amnesiac,
  title={Amnesiac machine learning},
  author={Graves, Laura and Nagisetty, Vineel and Ganesh, Vijay},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={35},
  number={13},
  pages={11516--11524},
  year={2021}
}

@inproceedings{kenton2019bert,
  title={Bert: Pre-training of deep bidirectional transformers for language understanding},
  author={Kenton, Jacob Devlin Ming-Wei Chang and Toutanova, Lee Kristina},
  booktitle={Proceedings of naacL-HLT},
  volume={1},
  number={2},
  year={2019},
  organization={Minneapolis, Minnesota}
}

@inproceedings{izzo2021approximate,
  title={Approximate data deletion from machine learning models},
  author={Izzo, Zachary and Smart, Mary Anne and Chaudhuri, Kamalika and Zou, James},
  booktitle={International Conference on Artificial Intelligence and Statistics},
  pages={2008--2016},
  year={2021},
  organization={PMLR}
}

@inproceedings{shokri2017membership,
  title={Membership inference attacks against machine learning models},
  author={Shokri, Reza and Stronati, Marco and Song, Congzheng and Shmatikov, Vitaly},
  booktitle={2017 IEEE symposium on security and privacy (SP)},
  pages={3--18},
  year={2017},
  organization={IEEE}
}

@inproceedings{hu2024eraser,
  title={Eraser: Machine unlearning in mlaas via an inference serving-aware approach},
  author={Hu, Yuke and Lou, Jian and Liu, Jiaqi and Ni, Wangze and Lin, Feng and Qin, Zhan and Ren, Kui},
  booktitle={Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security},
  pages={3883--3897},
  year={2024}
}

@inproceedings{chen2021machine,
  title={When machine unlearning jeopardizes privacy},
  author={Chen, Min and Zhang, Zhikun and Wang, Tianhao and Backes, Michael and Humbert, Mathias and Zhang, Yang},
  booktitle={Proceedings of the 2021 ACM SIGSAC conference on computer and communications security},
  pages={896--911},
  year={2021}
}

@article{lu2022label,
  title={Label-only membership inference attacks on machine unlearning without dependence of posteriors},
  author={Lu, Zhaobo and Liang, Hai and Zhao, Minghao and Lv, Qingzhe and Liang, Tiancai and Wang, Yilei},
  journal={International Journal of Intelligent Systems},
  volume={37},
  number={11},
  pages={9424--9441},
  year={2022},
  publisher={Wiley Online Library}
}

@article{gao2022deletion,
  title={Deletion inference, reconstruction, and compliance in machine (un) learning},
  author={Gao, Ji and Garg, Sanjam and Mahmoody, Mohammad and Vasudevan, Prashant Nalini},
  journal={Proceedings on Privacy Enhancing Technologies},
  year={2022}
}

@misc{chen2025survey,
  title={A survey of security and privacy issues of machine unlearning},
  author={Chen, Aobo and Li, Yangyi and Zhao, Chenxu and Huai, Mengdi},
  year={2025},
  publisher={Wiley Online Library}
}

@inproceedings{fredrikson2014privacy,
  title={Privacy in pharmacogenetics: An $\{$End-to-End$\}$ case study of personalized warfarin dosing},
  author={Fredrikson, Matthew and Lantz, Eric and Jha, Somesh and Lin, Simon and Page, David and Ristenpart, Thomas},
  booktitle={23rd USENIX security symposium (USENIX Security 14)},
  pages={17--32},
  year={2014}
}

@inproceedings{fredrikson2015model,
  title={Model inversion attacks that exploit confidence information and basic countermeasures},
  author={Fredrikson, Matt and Jha, Somesh and Ristenpart, Thomas},
  booktitle={Proceedings of the 22nd ACM SIGSAC conference on computer and communications security},
  pages={1322--1333},
  year={2015}
}

@inproceedings{yang2019neural,
  title={Neural network inversion in adversarial setting via background knowledge alignment},
  author={Yang, Ziqi and Zhang, Jiyi and Chang, Ee-Chien and Liang, Zhenkai},
  booktitle={Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security},
  pages={225--240},
  year={2019}
}

@inproceedings{salem2020updates,
  title={$\{$Updates-Leak$\}$: Data set inference and reconstruction attacks in online learning},
  author={Salem, Ahmed and Bhattacharya, Apratim and Backes, Michael and Fritz, Mario and Zhang, Yang},
  booktitle={29th USENIX security symposium (USENIX Security 20)},
  pages={1291--1308},
  year={2020}
}

@inproceedings{an2022mirror,
  title={Mirror: Model inversion for deep learning network with high fidelity},
  author={An, Shengwei and Tao, Guanhong and Xu, Qiuling and Liu, Yingqi and Shen, Guangyu and Yao, Yuan and Xu, Jingwei and Zhang, Xiangyu},
  booktitle={Proceedings of the 29th Network and Distributed System Security Symposium},
  year={2022}
}

@inproceedings{kahla2022label,
  title={Label-only model inversion attacks via boundary repulsion},
  author={Kahla, Mostafa and Chen, Si and Just, Hoang Anh and Jia, Ruoxi},
  booktitle={Proceedings of the IEEE/CVF conference on computer vision and pattern recognition},
  pages={15045--15053},
  year={2022}
}

@article{sohoni2020no,
  title={No subclass left behind: Fine-grained robustness in coarse-grained classification problems},
  author={Sohoni, Nimit and Dunnmon, Jared and Angus, Geoffrey and Gu, Albert and R{\'e}, Christopher},
  journal={Advances in Neural Information Processing Systems},
  volume={33},
  pages={19339--19352},
  year={2020}
}

@misc{moons,
  title = {make\_moons function to generate the moons dataset},
  author = {scikit-learn},
  howpublished = {\url{https://scikit-learn.org/dev/modules/generated/sklearn.datasets.make_moons.html}},
  year = {2024}, 
}

@misc{blobs,
  title = {make\_gaussian\_quantiles function to generate the blobs dataset},
  author = {scikit-learn},
  howpublished = {\url{https://scikit-learn.org/stable/modules/generated/sklearn.datasets.make_gaussian_quantiles.html}},
  year = {2024}, 
}

@inproceedings{10.1145/3655693.3655697,
author = {Perifanis, Vasileios and Karypidis, Efstathios and Komodakis, Nikos and Efraimidis, Pavlos},
title = {SFTC: Machine Unlearning via Selective Fine-tuning and Targeted Confusion},
year = {2024},
isbn = {9798400716515},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
doi = {10.1145/3655693.3655697},
booktitle = {Proceedings of the 2024 European Interdisciplinary Cybersecurity Conference},
pages = {29–36},
numpages = {8},
keywords = {Data Privacy, Deep Learning, Machine Learning Security and Privacy, Machine Unlearning},
location = {Xanthi, Greece},
series = {EICC '24}
}

@inproceedings{DBLP:conf/iclr/FanLZ0W024,
  author       = {Chongyu Fan and
                  Jiancheng Liu and
                  Yihua Zhang and
                  Eric Wong and
                  Dennis Wei and
                  Sijia Liu},
  title        = {SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency
                  in Both Image Classification and Generation},
  booktitle    = {The Twelfth International Conference on Learning Representations,
                  {ICLR} 2024, Vienna, Austria, May 7-11, 2024},
  publisher    = {OpenReview.net},
  year         = {2024},
  timestamp    = {Sun, 04 Aug 2024 19:41:06 +0200},
  biburl       = {https://dblp.org/rec/conf/iclr/FanLZ0W024.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{szegedy2017inception,
  title={Inception-v4, inception-resnet and the impact of residual connections on learning},
  author={Szegedy, Christian and Ioffe, Sergey and Vanhoucke, Vincent and Alemi, Alexander},
  booktitle={Proceedings of the AAAI conference on artificial intelligence},
  volume={31},
  number={1},
  year={2017}
}

@article{bhandari1996genetic,
  title={Genetic algorithm with elitist model and its convergence},
  author={Bhandari, Dinabandhu and Murthy, CA and Pal, Sankar K},
  journal={International journal of pattern recognition and artificial intelligence},
  volume={10},
  number={06},
  pages={731--747},
  year={1996},
  publisher={World Scientific}
}

@article{DBLP:journals/jmlr/ZhangBS22,
  author       = {Chiyuan Zhang and
                  Samy Bengio and
                  Yoram Singer},
  title        = {Are All Layers Created Equal?},
  journal      = {J. Mach. Learn. Res.},
  volume       = {23},
  pages        = {67:1--67:28},
  year         = {2022},
  timestamp    = {Wed, 11 Sep 2024 14:41:28 +0200},
  biburl       = {https://dblp.org/rec/journals/jmlr/ZhangBS22.bib},
  bibsource    = {dblp computer science bibliography, https://dblp.org}
}

@article{ILSVRC15,
Author = {Olga Russakovsky and Jia Deng and Hao Su and Jonathan Krause and Sanjeev Satheesh and Sean Ma and Zhiheng Huang and Andrej Karpathy and Aditya Khosla and Michael Bernstein and Alexander C. Berg and Li Fei-Fei},
Title = {{ImageNet Large Scale Visual Recognition Challenge}},
Year = {2015},
journal   = {International Journal of Computer Vision (IJCV)},
doi = {10.1007/s11263-015-0816-y},
volume={115},
number={3},
pages={211-252}
}

@article{hu2022membership,
  title={Membership inference attacks on machine learning: A survey},
  author={Hu, Hongsheng and Salcic, Zoran and Sun, Lichao and Dobbie, Gillian and Yu, Philip S and Zhang, Xuyun},
  journal={ACM Computing Surveys (CSUR)},
  volume={54},
  number={11s},
  pages={1--37},
  year={2022},
  publisher={ACM New York, NY}
}

@inproceedings{selvaraju2017grad,
  title={Grad-cam: Visual explanations from deep networks via gradient-based localization},
  author={Selvaraju, Ramprasaath R and Cogswell, Michael and Das, Abhishek and Vedantam, Ramakrishna and Parikh, Devi and Batra, Dhruv},
  booktitle={Proceedings of the IEEE international conference on computer vision},
  pages={618--626},
  year={2017}
}