{"id":"https://openalex.org/W4406232023","doi":"https://doi.org/10.1002/aaai.12209","title":"A survey of security and privacy issues of machine unlearning","display_name":"A survey of security and privacy issues of machine unlearning","publication_year":2025,"publication_date":"2025-01-10","ids":{"openalex":"https://openalex.org/W4406232023","doi":"https://doi.org/10.1002/aaai.12209"},"language":"en","primary_location":{"id":"doi:10.1002/aaai.12209","doi":"https://doi.org/10.1002/aaai.12209","is_oa":true,"landing_page_url":"https://doi.org/10.1002/aaai.12209","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1002/aaai.12209","source":{"id":"https://openalex.org/S163019073","display_name":"AI Magazine","issn_l":"0738-4602","issn":["0738-4602","2371-9621"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","doyens","jufo-1","norway-1","poland-100","russia-white-list-2"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Magazine","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1002/aaai.12209","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Aobo Chen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aobo Chen","raw_affiliation_strings":["Department of Computer Science Iowa State University Iowa USA","Department of Computer Science, Iowa State University, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science Iowa State University Iowa USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Department of Computer Science, Iowa State University, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101806898","display_name":"Yangyi Li","orcid":"https://orcid.org/0009-0005-0771-166X","observed_orcids":["https://orcid.org/0009-0005-0771-166X","https://orcid.org/0009-0008-6564-1710"]},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yangyi Li","raw_affiliation_strings":["Department of Computer Science Iowa State University Iowa USA","Department of Computer Science, Iowa State University, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science Iowa State University Iowa USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Department of Computer Science, Iowa State University, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101463817","display_name":"Chenxu Zhao","orcid":"https://orcid.org/0000-0003-4044-5701","observed_orcids":["https://orcid.org/0000-0003-4044-5701"]},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chenxu Zhao","raw_affiliation_strings":["Department of Computer Science Iowa State University Iowa USA","Department of Computer Science, Iowa State University, Iowa, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science Iowa State University Iowa USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Department of Computer Science, Iowa State University, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016035883","display_name":"Mengdi Huai","orcid":"https://orcid.org/0000-0001-6368-5973","observed_orcids":["https://orcid.org/0000-0001-6368-5973"]},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Mengdi Huai","raw_affiliation_strings":["Department of Computer Science Iowa State University Iowa USA","Department of Computer Science, Iowa State University, Iowa, USA"],"raw_orcid":"https://orcid.org/0000-0001-6368-5973","affiliations":[{"raw_affiliation_string":"Department of Computer Science Iowa State University Iowa USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Department of Computer Science, Iowa State University, Iowa, USA","institution_ids":["https://openalex.org/I173911158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5016035883"],"corresponding_institution_ids":["https://openalex.org/I173911158"],"apc_list":{"value":2400,"currency":"USD","value_usd":2400},"apc_paid":{"value":2400,"currency":"USD","value_usd":2400},"fwci":5.4033,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.95973861,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"46","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9394999742507935,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9394999742507935,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.05920000001788139,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/machine-unlearning","display_name":"machine unlearning","score":1.0},{"id":"https://openalex.org/keywords/security-attacks","display_name":"security attacks","score":0.7250000238418579},{"id":"https://openalex.org/keywords/privacy-risks","display_name":"privacy risks","score":0.9470000267028809},{"id":"https://openalex.org/keywords/right-to-be-forgotten","display_name":"right to be forgotten","score":0.9919999837875366},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.5740000009536743},{"id":"https://openalex.org/keywords/countermeasures","display_name":"countermeasures","score":0.6850000023841858},{"id":"https://openalex.org/keywords/mitigation-measures","display_name":"mitigation measures","score":0.6520000100135803},{"id":"https://openalex.org/keywords/privacy-preserving-machine-learning","display_name":"privacy-preserving machine learning","score":0.6150000095367432}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6428834199905396},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.558954119682312},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.49851083755493164}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/aaai.12209","doi":"https://doi.org/10.1002/aaai.12209","is_oa":true,"landing_page_url":"https://doi.org/10.1002/aaai.12209","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1002/aaai.12209","source":{"id":"https://openalex.org/S163019073","display_name":"AI Magazine","issn_l":"0738-4602","issn":["0738-4602","2371-9621"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","doyens","jufo-1","norway-1","poland-100","russia-white-list-2"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Magazine","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1002/aaai.12209","doi":"https://doi.org/10.1002/aaai.12209","is_oa":true,"landing_page_url":"https://doi.org/10.1002/aaai.12209","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1002/aaai.12209","source":{"id":"https://openalex.org/S163019073","display_name":"AI Magazine","issn_l":"0738-4602","issn":["0738-4602","2371-9621"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","doyens","jufo-1","norway-1","poland-100","russia-white-list-2"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Magazine","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.7699999809265137}],"study_designs":[],"awards":[{"id":"https://openalex.org/G2220770974","display_name":null,"funder_award_id":"2350332","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G4879695479","display_name":"Collaborative Research: SaTC: CORE: Small: Security and Privacy in Machine Unlearning","funder_award_id":"2350332","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4406232023.pdf","grobid_xml":"https://content.openalex.org/works/W4406232023.grobid-xml"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W2003676537","https://openalex.org/W2241836009","https://openalex.org/W2461943168","https://openalex.org/W2612156440","https://openalex.org/W2962700793","https://openalex.org/W2984055845","https://openalex.org/W3007318395","https://openalex.org/W3023153742","https://openalex.org/W3036909764","https://openalex.org/W3043638540","https://openalex.org/W3135347465","https://openalex.org/W3135378441","https://openalex.org/W3154155772","https://openalex.org/W3193974325","https://openalex.org/W3196927807","https://openalex.org/W3199974954","https://openalex.org/W3211914940","https://openalex.org/W4200629388","https://openalex.org/W4210780574","https://openalex.org/W4221145530","https://openalex.org/W4221158899","https://openalex.org/W4230575913","https://openalex.org/W4292260100","https://openalex.org/W4312319920","https://openalex.org/W4313527335","https://openalex.org/W4320342277","https://openalex.org/W4321471480","https://openalex.org/W4382318444","https://openalex.org/W4386214368","https://openalex.org/W4386721882","https://openalex.org/W4387724493","https://openalex.org/W4390637864","https://openalex.org/W4390872775","https://openalex.org/W4391528840","https://openalex.org/W4391725286","https://openalex.org/W4392175274","https://openalex.org/W4393160197","https://openalex.org/W4399116019","https://openalex.org/W4399912701","https://openalex.org/W4400023656","https://openalex.org/W4400480119","https://openalex.org/W4400830279","https://openalex.org/W4401202952","https://openalex.org/W4402265414","https://openalex.org/W4402959574","https://openalex.org/W4404293797","https://openalex.org/W4405182767","https://openalex.org/W4409363928","https://openalex.org/W4415796054","https://openalex.org/W4415797003","https://openalex.org/W4415798099","https://openalex.org/W6796843635","https://openalex.org/W7036634323","https://openalex.org/W7133194422"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Abstract":[0],"Machine":[1],"unlearning":[2,60,93,118],"is":[3,62],"a":[4,96,132,169],"cutting\u2010edge":[5],"technology":[6],"that":[7],"embodies":[8],"the":[9,14,20,47,56,81,117,122,140],"privacy":[10,88,136,177,193],"legal":[11],"principle":[12],"of":[13,22,49,58,85,124,135,142],"right":[15],"to":[16,28,120,154],"be":[17],"forgotten":[18],"within":[19],"realm":[21],"machine":[23,59,92,125,143,173,197],"learning":[24,126],"(ML).":[25],"It":[26],"aims":[27],"remove":[29],"specific":[30],"data":[31],"or":[32],"knowledge":[33],"from":[34,39,157],"trained":[35],"models":[36,156],"without":[37],"retraining":[38],"scratch":[40],"and":[41,67,74,87,102,150,164,176,179,192,204],"has":[42],"gained":[43],"significant":[44,70],"attention":[45],"in":[46,52,116,206],"field":[48],"artificial":[50],"intelligence":[51],"recent":[53],"years.":[54],"However,":[55],"development":[57],"research":[61,188],"associated":[63,90,138],"with":[64,91,139],"inherent":[65],"vulnerabilities":[66,115],"threats,":[68],"posing":[69],"challenges":[71],"for":[72,190],"researchers":[73],"practitioners.":[75],"In":[76],"this":[77,207],"article,":[78],"we":[79,105,146,167,184],"provide":[80,168],"first":[82],"comprehensive":[83],"survey":[84],"security":[86,110,123,163,175,191],"issues":[89,194],"by":[94,107,196],"providing":[95],"systematic":[97],"classification":[98],"across":[99],"different":[100],"levels":[101],"criteria.":[103],"Specifically,":[104],"begin":[106],"investigating":[108],"unlearning\u2010based":[109,159,174],"attacks,":[111],"where":[112],"adversaries":[113],"exploit":[114],"process":[119],"compromise":[121],"(ML)":[127],"models.":[128],"We":[129],"then":[130],"conduct":[131],"thorough":[133],"examination":[134],"risks":[137],"adoption":[141],"unlearning.":[144],"Additionally,":[145],"explore":[147],"existing":[148],"countermeasures":[149],"mitigation":[151],"strategies":[152],"designed":[153],"protect":[155],"malicious":[158,181],"attacks":[160,178],"targeting":[161],"both":[162],"privacy.":[165],"Further,":[166],"detailed":[170],"comparison":[171],"between":[172],"traditional":[180],"attacks.":[182],"Finally,":[183],"discuss":[185],"promising":[186],"future":[187],"directions":[189],"posed":[195],"unlearning,":[198],"offering":[199],"insights":[200],"into":[201],"potential":[202],"solutions":[203],"advancements":[205],"evolving":[208],"field.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":5}],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2025-10-10T00:00:00"}