{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T03:28:34Z","timestamp":1777865314815,"version":"3.51.4"},"reference-count":48,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["92270123,62372122,62372130"],"award-info":[{"award-number":["92270123,62372122,62372130"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.00293","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"3058-3068","source":"Crossref","is-referenced-by-count":0,"title":["Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy"],"prefix":"10.1109","author":[{"given":"Yaxin","family":"Xiao","sequence":"first","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qingqing","family":"Ye","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li","family":"Hu","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Huadi","family":"Zheng","sequence":"additional","affiliation":[{"name":"Huawei Technologies Co., Ltd"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haibo","family":"Hu","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zi","family":"Liang","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haoyang","family":"Li","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yijie","family":"Jiao","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,Department of Electronical and Electronic Engineering"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Bill text"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jeconom.2012.05.001"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3704633"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3551921"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.52202\/079017-3334"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00750"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484756"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i6.25879"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00482"},{"key":"ref12","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"9th International Conference on Learning Representations, ICLR 2021, Virtual Event","author":"Dosovitskiy"},{"key":"ref13","article-title":"Salun: Empowering machine unlearning via gradient-based weight saliency in both image classification and generation","volume-title":"International Conference on Learning Representations","author":"Fan"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref15","article-title":"Meta-unlearning on diffusion models: Preventing relearning unlearned concepts","author":"Gao","year":"2024","journal-title":"CoRR"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-naacl.132"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00932"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17371"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84858-7"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/WACV57701.2024.00475"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00248"},{"key":"ref23","article-title":"Jogging the memory of unlearned 11 ms through targeted relearning attacks","author":"Hu","year":"2024","journal-title":"arXiv preprint"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0831"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2246"},{"key":"ref26","first-page":"8327","article-title":"F? d: On understanding the role of deep feature spaces on face generation evaluation","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","author":"Kabra"},{"key":"ref27","article-title":"Progressive growing of gans for improved quality, stability, and variation","volume-title":"6th International Conference on Learning Representations, ICLR 2018","author":"Karras"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0095"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i17.34012"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3696410.3714711"},{"key":"ref31","first-page":"2671","article-title":"A datafree backdoor injection approach in neural networks","volume-title":"32nd USENIX Security Symposium, USENIX Security 2023","author":"Lv"},{"key":"ref32","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv preprint"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2013.03.010"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2012.2214050"},{"key":"ref35","article-title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!","volume-title":"The Twelfth International Conference on Learning Representations, ICLR 2024","author":"Qi"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01042"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02155"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/DSAA49011.2020.00096"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00027"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00474"},{"issue":"11","key":"ref42","article-title":"Visualizing data using t -sne","volume":"9","author":"Van der Maaten","year":"2008","journal-title":"Journal of machine learning research"},{"key":"ref43","first-page":"2116","article-title":"Antidreambooth: Protecting users from personalized text-to-image synthesis","volume-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","author":"Van Le"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.02678"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23087"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0741"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72998-0_22"},{"key":"ref48","first-page":"10","article-title":"What makes unlearning hard and what to do about it","volume-title":"Advances in Neural Information Processing Systems 38: Annual Conference on Neural Information Processing Systems 2024","author":"Zhao"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11445476.pdf?arnumber=11445476","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T06:14:45Z","timestamp":1777529685000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11445476\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.00293","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}