{"total":198,"rows":[{"id":"2103.03279","title":"Remember What You Want to Forget: Algorithms for Machine Unlearning","created":"2021-03-04","cited_by_count":371,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2209.02299","title":"A Survey of Machine Unlearning","created":"2022-09-06","cited_by_count":312,"area":"safety"},{"id":"2109.13398","title":"Unrolling SGD: Understanding Factors Influencing Machine Unlearning","created":"2021-09-27","cited_by_count":279,"area":"safety"},{"id":"2302.09880","title":"Towards Unbounded Machine Unlearning","created":"2023-02-20","cited_by_count":268,"area":"safety"},{"id":"2111.08947","title":"Fast Yet Effective Machine Unlearning","created":"2021-11-17","cited_by_count":217,"area":"safety"},{"id":"2205.08096","title":"Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher","created":"2022-05-17","cited_by_count":194,"area":"safety"},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2303.11570","title":"Boundary Unlearning","created":"2023-03-21","cited_by_count":134,"area":"safety"},{"id":"2201.05629","title":"Zero-Shot Machine Unlearning","created":"2022-01-14","cited_by_count":133,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2403.03329","title":"Guardrail Baselines for Unlearning in LLMs","created":"2024-03-05","cited_by_count":96,"area":"safety"},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2308.07061","title":"Machine Unlearning: Solutions and Challenges","created":"2023-08-14","cited_by_count":93,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2201.06640","title":"Towards Adversarial Evaluations for Inexact Machine Unlearning","created":"2022-01-17","cited_by_count":84,"area":"safety"},{"id":"2310.20448","title":"A Survey on Federated Unlearning: Challenges, Methods, and Future Directions","created":"2023-10-31","cited_by_count":63,"area":"safety"},{"id":"2210.08911","title":"Forget Unlearning: Towards True Data-Deletion in Machine Learning","created":"2022-10-17","cited_by_count":61,"area":"safety"},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2109.08266","title":"Hard to Forget: Poisoning Attacks on Certified Machine Unlearning","created":"2021-09-17","cited_by_count":52,"area":"safety"},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2205.12709","title":"VeriFi: Towards Verifiable Federated Unlearning","created":"2022-05-25","cited_by_count":46,"area":"safety"},{"id":"2409.19732","title":"Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement","created":"2024-09-29","cited_by_count":45,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2302.13406","title":"GNNDelete: A General Strategy for Unlearning in Graph Neural Networks","created":"2023-02-26","cited_by_count":43,"area":null},{"id":"2302.02069","title":"Heterogeneous Federated Knowledge Graph Embedding Learning and Unlearning","created":"2023-02-04","cited_by_count":40,"area":"safety"},{"id":"2403.13682","title":"Threats, Attacks, and Defenses in Machine Unlearning: A Survey","created":"2024-03-20","cited_by_count":39,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2312.08207","title":"Black-box Membership Inference Attacks against Fine-tuned Diffusion Models","created":"2023-12-13","cited_by_count":35,"area":"diffusion"},{"id":"2405.07406","title":"Machine Unlearning: A Comprehensive Survey","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2310.19704","title":"A Survey on Knowledge Editing of Neural Networks","created":"2023-10-30","cited_by_count":34,"area":null},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2409.13474","title":"Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models","created":"2024-09-20","cited_by_count":33,"area":"alignment"},{"id":"2210.08196","title":"Deep Regression Unlearning","created":"2022-10-15","cited_by_count":32,"area":"safety"},{"id":"2411.11315","title":"A Review on Machine Unlearning","created":"2024-11-18","cited_by_count":32,"area":"safety"},{"id":"2304.03093","title":"Inductive Graph Unlearning","created":"2023-04-06","cited_by_count":31,"area":"safety"},{"id":"2408.00920","title":"Towards Certified Unlearning for Deep Neural Networks","created":"2024-08-01","cited_by_count":31,"area":"safety"},{"id":"2207.08224","title":"Learning with Recoverable Forgetting","created":"2022-07-17","cited_by_count":30,"area":null},{"id":"2405.20272","title":"Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable","created":"2024-05-30","cited_by_count":25,"area":"safety"},{"id":"2202.03460","title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning","created":"2022-02-07","cited_by_count":24,"area":"safety"},{"id":"2310.09949","title":"Chameleon: a Heterogeneous and Disaggregated Accelerator System for Retrieval-Augmented Language Models","created":"2023-10-15","cited_by_count":23,"area":"rag"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2408.00929","title":"Verification of Machine Unlearning is Fragile","created":"2024-08-01","cited_by_count":21,"area":"safety"},{"id":"2202.05126","title":"Deep Learning for Computational Cytology: A Survey","created":"2022-02-10","cited_by_count":20,"area":null},{"id":"2306.03558","title":"Machine Unlearning: A Survey","created":"2023-06-06","cited_by_count":19,"area":"safety"},{"id":"2407.10494","title":"Learning to Unlearn for Robust Machine Unlearning","created":"2024-07-15","cited_by_count":19,"area":"safety"},{"id":"2409.09778","title":"Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions","created":"2024-09-15","cited_by_count":19,"area":"safety"},{"id":"2309.00886","title":"Tight Bounds for Machine Unlearning via Differential Privacy","created":"2023-09-02","cited_by_count":18,"area":"safety"},{"id":"2404.00506","title":"Label-Agnostic Forgetting: A Supervision-Free Unlearning in Deep Models","created":"2024-03-31","cited_by_count":18,"area":"safety"},{"id":"2304.02782","title":"FACE-AUDITOR: Data Auditing in Facial Recognition Systems","created":"2023-04-05","cited_by_count":16,"area":null},{"id":"2406.07687","title":"Adversarial Machine Unlearning","created":"2024-06-11","cited_by_count":16,"area":"safety"},{"id":"2210.11334","title":"Proof of Unlearning: Definitions and Instantiation","created":"2022-10-20","cited_by_count":15,"area":"safety"},{"id":"2311.16136","title":"ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach","created":"2023-11-03","cited_by_count":15,"area":"safety"},{"id":"2406.06186","title":"A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks","created":"2024-06-10","cited_by_count":15,"area":"safety"},{"id":"2408.07728","title":"Moderator: Moderating Text-to-Image Diffusion Models through Fine-grained Context-based Policies","created":"2024-08-14","cited_by_count":15,"area":"diffusion"},{"id":"2410.08074","title":"Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models","created":"2024-10-10","cited_by_count":15,"area":"diffusion"},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2312.02052","title":"DUCK: Distance-based Unlearning via Centroid Kinematics","created":"2023-12-04","cited_by_count":13,"area":"safety"},{"id":"2402.15109","title":"Remaining-data-free Machine Unlearning by Suppressing Sample Contribution","created":"2024-02-23","cited_by_count":13,"area":"safety"},{"id":"2406.13348","title":"Textual Unlearning Gives a False Sense of Unlearning","created":"2024-06-19","cited_by_count":13,"area":"safety"},{"id":"2302.06676","title":"Netflix and Forget: Efficient and Exact Machine Unlearning from Bi-linear Recommendations","created":"2023-02-13","cited_by_count":12,"area":"safety"},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2308.09881","title":"Generative Adversarial Networks Unlearning","created":"2023-08-19","cited_by_count":11,"area":"safety"},{"id":"2311.15603","title":"QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillation","created":"2023-11-27","cited_by_count":11,"area":"safety"},{"id":"2403.12052","title":"A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Models","created":"2024-01-04","cited_by_count":11,"area":"diffusion"},{"id":"2405.17462","title":"Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity","created":"2024-05-23","cited_by_count":11,"area":"safety"},{"id":"2506.06112","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2506.14003","title":"Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2412.00782","title":"Memories of Forgotten Concepts","created":"2024-12-01","cited_by_count":10,"area":"diffusion"},{"id":"2502.15680","title":"Privacy Ripple Effects from Adding or Removing Personal Information in Language Model Training","created":"2025-02-21","cited_by_count":10,"area":null},{"id":"2405.19211","title":"Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning","created":"2024-05-29","cited_by_count":9,"area":"safety"},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2506.13009","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","created":"2025-06-16","cited_by_count":9,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2211.15918","title":"Similarity Distribution based Membership Inference Attack on Person Re-identification","created":"2022-11-29","cited_by_count":8,"area":"safety"},{"id":"2501.02728","title":"OpenGU: A Comprehensive Benchmark for Graph Unlearning","created":"2025-01-06","cited_by_count":8,"area":"safety"},{"id":"2506.15115","title":"Towards Reliable Forgetting: A Survey on Machine Unlearning Verification","created":"2025-06-18","cited_by_count":8,"area":"safety"},{"id":"2404.12530","title":"TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agents","created":"2024-04-18","cited_by_count":7,"area":"offlinerl"},{"id":"2412.12836","title":"A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions","created":"2024-12-17","cited_by_count":7,"area":null},{"id":"2502.07974","title":"From Hazard Identification to Controller Design: Proactive and LLM-Supported Safety Engineering for ML-Powered Systems","created":"2025-02-11","cited_by_count":7,"area":null},{"id":"2502.12430","title":"Position: Bridge the Gaps between Machine Unlearning and AI Regulation","created":"2025-02-18","cited_by_count":7,"area":"safety"},{"id":"2505.12238","title":"PANORAMA: A synthetic PII-laced dataset for studying sensitive data memorization in LLMs","created":"2025-05-18","cited_by_count":7,"area":null},{"id":"2507.18725","title":"The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models","created":"2025-07-24","cited_by_count":7,"area":"safety"},{"id":"2401.15917","title":"Blockchain-enabled Trustworthy Federated Unlearning","created":"2024-01-29","cited_by_count":6,"area":"safety"},{"id":"2502.19770","title":"TAPE: Tailored Posterior Difference for Auditing of Machine Unlearning","created":"2025-02-27","cited_by_count":6,"area":"safety"},{"id":"2505.07640","title":"Certified Data Removal Under High-dimensional Settings","created":"2025-05-12","cited_by_count":6,"area":"safety"},{"id":"2510.13094","title":"Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach","created":"2025-10-15","cited_by_count":6,"area":"safety"},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2305.15242","title":"Machine Unlearning: its nature, scope, and importance for a \"delete culture\"","created":"2023-05-24","cited_by_count":5,"area":"safety"},{"id":"2404.09724","title":"Privacy-Preserving Federated Unlearning with Certified Client Removal","created":"2024-04-15","cited_by_count":5,"area":"safety"},{"id":"2404.11577","title":"A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation","created":"2024-04-17","cited_by_count":5,"area":"safety"},{"id":"2405.10425","title":"Data Selection for Transfer Unlearning","created":"2024-05-16","cited_by_count":5,"area":"safety"},{"id":"2410.10922","title":"Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure","created":"2024-10-14","cited_by_count":5,"area":"safety"}],"next_cursor":"100"}