{"id":"https://openalex.org/W4414359255","doi":"https://doi.org/10.24963/ijcai.2025/691","title":"Recalling The Forgotten Class Memberships: Unlearned Models Can Be Noisy Labelers to Leak Privacy","display_name":"Recalling The Forgotten Class Memberships: Unlearned Models Can Be Noisy Labelers to Leak Privacy","publication_year":2025,"publication_date":"2025-09-01","ids":{"openalex":"https://openalex.org/W4414359255","doi":"https://doi.org/10.24963/ijcai.2025/691"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2025/691","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/691","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhihao Sui","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihao Sui","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010167248","display_name":"Liang Hu","orcid":"https://orcid.org/0000-0001-6984-834X"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liang Hu","raw_affiliation_strings":["Tongji University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tongji University","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020296517","display_name":"Jian Cao","orcid":"https://orcid.org/0000-0002-7313-5892"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Cao","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001736656","display_name":"Dora D. Liu","orcid":"https://orcid.org/0000-0002-8337-9065"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dora D. Liu","raw_affiliation_strings":["Tongji University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tongji University","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077006200","display_name":"Usman Naseem","orcid":"https://orcid.org/0000-0003-0191-7171"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Usman Naseem","raw_affiliation_strings":["Macquarie University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Macquarie University","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062669332","display_name":"Zhongyuan Lai","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153682","display_name":"Intelligent Health (United Kingdom)","ror":"https://ror.org/0576zak10","country_code":"GB","type":"company","lineage":["https://openalex.org/I4210153682"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zhongyuan Lai","raw_affiliation_strings":["Shanghai Ballsnow Intelligent Technology Co. Ltd"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Ballsnow Intelligent Technology Co. Ltd","institution_ids":["https://openalex.org/I4210153682"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100784844","display_name":"Qi Zhang","orcid":"https://orcid.org/0000-0002-1037-1361"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Zhang","raw_affiliation_strings":["Tongji University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tongji University","institution_ids":["https://openalex.org/I116953780"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"6209","last_page":"6218"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.890999972820282,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.890999972820282,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.809499979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.76419997215271,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.7559000253677368},{"id":"https://openalex.org/keywords/forgetting","display_name":"Forgetting","score":0.7002999782562256},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.535099983215332},{"id":"https://openalex.org/keywords/recall","display_name":"Recall","score":0.5285000205039978},{"id":"https://openalex.org/keywords/leak","display_name":"Leak","score":0.36500000953674316},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.3292999863624573}],"concepts":[{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.7559000253677368},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7350000143051147},{"id":"https://openalex.org/C7149132","wikidata":"https://www.wikidata.org/wiki/Q1377840","display_name":"Forgetting","level":2,"score":0.7002999782562256},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5440999865531921},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.535099983215332},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.5285000205039978},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4004000127315521},{"id":"https://openalex.org/C2780378346","wikidata":"https://www.wikidata.org/wiki/Q1349983","display_name":"Leak","level":2,"score":0.36500000953674316},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3292999863624573},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27149999141693115},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2025/691","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/691","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Machine":[0],"Unlearning":[1],"(MU)":[2],"technology":[3],"facilitates":[4],"the":[5,8,58,70,75,87,134,149],"removal":[6],"of":[7,10,33,38,62,133,160],"influence":[9],"specific":[11],"data":[12],"instances":[13],"from":[14,79],"trained":[15],"models":[16,52,81],"on":[17,45,73,139,177],"request.":[18],"Despite":[19],"rapid":[20],"advancements":[21],"in":[22,156],"MU":[23,46,141,178],"technology,":[24],"its":[25],"vulnerabilities":[26],"are":[27],"still":[28],"underexplored,":[29],"posing":[30],"potential":[31],"risks":[32],"privacy":[34,54],"breaches":[35],"through":[36],"leaks":[37],"ostensibly":[39],"unlearned":[40,80,161],"information.":[41],"Current":[42],"limited":[43],"research":[44,176],"attacks":[47],"requires":[48],"access":[49,85],"to":[50,86,111,114],"original":[51,88],"containing":[53],"data,":[55],"which":[56],"violates":[57],"critical":[59],"privacy-preserving":[60],"objective":[61],"MU.":[63],"To":[64],"address":[65],"this":[66],"gap,":[67],"we":[68,91],"initiate":[69],"innovative":[71],"study":[72,167],"recalling":[74],"forgotten":[76],"class":[77,158],"memberships":[78,159],"(ULMs)":[82],"without":[83],"requiring":[84],"one.":[89],"Specifically,":[90],"implement":[92],"a":[93,100,122,164,172],"Membership":[94],"Recall":[95],"Attack":[96],"(MRA)":[97],"framework":[98],"with":[99,124,143],"teacher-student":[101],"knowledge":[102,113],"distillation":[103],"architecture,":[104],"where":[105],"ULMs":[106],"serve":[107],"as":[108],"noisy":[109],"labelers":[110],"transfer":[112],"student":[115],"models.":[116],"Then,":[117],"it":[118],"is":[119],"translated":[120],"into":[121],"Learning":[123],"Noisy":[125],"Labels":[126],"(LNL)":[127],"problem":[128],"for":[129,174],"inferring":[130],"correct":[131],"labels":[132],"forgetting":[135],"instances.":[136,162],"Extensive":[137],"experiments":[138],"state-of-the-art":[140],"methods":[142],"multiple":[144],"real":[145],"datasets":[146],"demonstrate":[147],"that":[148],"proposed":[150],"MRA":[151],"strategy":[152],"exhibits":[153],"high":[154],"efficacy":[155],"recovering":[157],"As":[163],"result,":[165],"our":[166],"and":[168],"evaluation":[169],"have":[170],"established":[171],"benchmark":[173],"future":[175],"vulnerabilities.":[179]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}