{"id":"https://openalex.org/W7138440965","doi":"https://doi.org/10.1609/aaai.v40i30.39725","title":"Retaliatory Attacks Against Federated Unlearning via Data Leakage","display_name":"Retaliatory Attacks Against Federated Unlearning via Data Leakage","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7138440965","doi":"https://doi.org/10.1609/aaai.v40i30.39725"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v40i30.39725","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39725","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39725/43686","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39725/43686","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079084910","display_name":"Xinyi Sheng","orcid":"https://orcid.org/0009-0001-9661-9638"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xinyi Sheng","raw_affiliation_strings":["School of Computer Science, The University of Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129642371","display_name":"Wei Bao","orcid":null},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei Bao","raw_affiliation_strings":["School of Computer Science, The University of Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129711068","display_name":"Hequn Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hequn Wang","raw_affiliation_strings":["School of Computer Science, The University of Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123605729","display_name":"Yuqin Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yuqin Liu","raw_affiliation_strings":["School of Computer Science, The University of Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129644342","display_name":"Sen Fu","orcid":null},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sen Fu","raw_affiliation_strings":["School of Computer Science, The University of Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I129604602"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"30","first_page":"25321","last_page":"25329"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5713000297546387,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5713000297546387,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.29249998927116394,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.029500000178813934,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6528000235557556},{"id":"https://openalex.org/keywords/forgetting","display_name":"Forgetting","score":0.570900022983551},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4900999963283539},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.4596000015735626},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4205999970436096},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.4092000126838684},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.373199999332428}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.765500009059906},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6528000235557556},{"id":"https://openalex.org/C7149132","wikidata":"https://www.wikidata.org/wiki/Q1377840","display_name":"Forgetting","level":2,"score":0.570900022983551},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5485000014305115},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4900999963283539},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.4596000015735626},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4205999970436096},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.4092000126838684},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.373199999332428},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.3449999988079071},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33550000190734863},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.33399999141693115},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2906999886035919},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.28299999237060547},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2757999897003174},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.26190000772476196},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1609/aaai.v40i30.39725","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39725","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39725/43686","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:ojs.aaai.org:article/39725","is_oa":false,"landing_page_url":"https://ojs.aaai.org/index.php/AAAI/article/view/39725","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2159-5399","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i30.39725","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39725","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39725/43686","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.6382351517677307}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7138440965.pdf","grobid_xml":"https://content.openalex.org/works/W7138440965.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"unlearning":[1,68,76],"(FU)":[2],"allows":[3],"a":[4,8,36,64,107,117,179],"participating":[5],"client":[6,37,65,126],"in":[7],"federated":[9],"learning":[10],"(FL)":[11],"system":[12],"to":[13,27,67,72,127],"remove":[14],"its":[15],"contribution":[16],"from":[17,32,152],"the":[18,24,33,43,46,75,83,88,96,101,130,149,155,168,173,187,190],"trained":[19],"global":[20,150,169],"model,":[21,114],"thereby":[22],"enforcing":[23],"client\u2019s":[25],"``right":[26],"be":[28,70],"forgotten''":[29],"(RTBF).":[30],"However,":[31],"perspective":[34],"of":[35,45,90,181,189],"that":[38,122],"does":[39],"not":[40],"request":[41],"unlearning,":[42],"activation":[44],"FU":[47,102,182],"process":[48],"may":[49,69],"disrupt":[50],"ongoing":[51],"FL":[52],"training":[53],"and":[54,58,160,184],"introduce":[55,138],"additional":[56],"computational":[57],"time":[59],"overhead.":[60],"In":[61,78],"such":[62,91],"cases,":[63],"opposed":[66],"incentivized":[71],"retaliate":[73],"against":[74],"client(s).":[77],"this":[79,135],"work,":[80],"we":[81,105,137],"take":[82],"first":[84],"step":[85],"toward":[86],"demonstrating":[87],"feasibility":[89],"retaliatory":[92,141,192],"behavior":[93],"by":[94,116],"exploiting":[95],"information":[97],"leakage":[98],"introduced":[99],"during":[100],"process.":[103],"Specifically,":[104],"propose":[106],"novel":[108],"unlearning-induced":[109],"membership":[110],"inference":[111],"attack":[112,193],"(MIA)":[113],"followed":[115],"coarse-to-fine":[118],"data":[119,156],"generation":[120],"method":[121],"enables":[123],"an":[124],"adversarial":[125],"locally":[128],"reconstruct":[129],"unlearned":[131,174],"data.":[132,175],"Building":[133],"on":[134,172],"reconstruction,":[136],"two":[139],"targeted":[140],"attacks:":[142],"(1)":[143],"Anti-Unlearning":[144],"Attack":[145,163],"(AUA),":[146],"which":[147,165],"hinders":[148],"model":[151],"successfully":[153],"forgetting":[154],"intended":[157],"for":[158],"removal,":[159],"(2)":[161],"Discrimination-Unlearning":[162],"(DUA),":[164],"specifically":[166],"degrades":[167],"model\u2019s":[170],"performance":[171],"Extensive":[176],"experiments":[177],"across":[178],"variety":[180],"methods":[183],"settings":[185],"validate":[186],"effectiveness":[188],"proposed":[191],"framework.":[194]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-18T00:00:00"}