{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,19]],"date-time":"2026-07-19T03:00:24Z","timestamp":1784430024284,"version":"3.55.0"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000923","name":"Australian Research Council Discovery","doi-asserted-by":"publisher","award":["DP200100946"],"award-info":[{"award-number":["DP200100946"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000923","name":"Australian Research Council Discovery","doi-asserted-by":"publisher","award":["DP230100246"],"award-info":[{"award-number":["DP230100246"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3297905","type":"journal-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:25:09Z","timestamp":1689960309000},"page":"4732-4746","source":"Crossref","is-referenced-by-count":101,"title":["FedRecovery: Differentially Private Machine Unlearning for Federated Learning Frameworks"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7608-7910","authenticated-orcid":false,"given":"Lefeng","family":"Zhang","sequence":"first","affiliation":[{"name":"Centre for Cyber Security and Privacy and the School of Computer Science, The University of Technology, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3411-7947","authenticated-orcid":false,"given":"Tianqing","family":"Zhu","sequence":"additional","affiliation":[{"name":"Centre for Cyber Security and Privacy and the School of Computer Science, The University of Technology, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haibin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Operational Research and Scientific Computation, Faculty of Science, Beijing University of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3289-3061","authenticated-orcid":false,"given":"Ping","family":"Xiong","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, School of Information and Safety Engineering, Zhongnan University of Economics and Law, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1680-2521","authenticated-orcid":false,"given":"Wanlei","family":"Zhou","sequence":"additional","affiliation":[{"name":"Centre for Cyber Security and Privacy and the School of Computer Science, The University of Technology, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","author":"ginart","year":"2019","journal-title":"Making AI Forget You Data Deletion in Machine Learning"},{"key":"ref12","article-title":"Federated unlearning with knowledge distillation","author":"wu","year":"2022","journal-title":"arXiv 2201 09441"},{"key":"ref15","first-page":"2008","article-title":"Approximate data deletion from machine learning models","volume":"130","author":"izzo","year":"2021","journal-title":"Proc 24th Int Conf Artif Intell Statist"},{"key":"ref14","first-page":"3832","article-title":"Certified data removal from machine learning models","author":"guo","year":"2020","journal-title":"Proc 37th ICML"},{"key":"ref11","first-page":"634","article-title":"Analyzing federated learning through an adversarial lens","volume":"97","author":"bhagoji","year":"2019","journal-title":"Proc 36th Int Conf Mach Learn"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00932"},{"key":"ref16","first-page":"18075","article-title":"Remember what you want to forget: Algorithms for machine unlearning","volume":"34","author":"sekhari","year":"2021","journal-title":"Advances in neural information processing systems"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796721"},{"key":"ref18","first-page":"10355","article-title":"DeltaGrad: Rapid retraining of machine learning models","volume":"119","author":"wu","year":"2020","journal-title":"Proc 37th ICML"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3510033"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/34.291440"},{"key":"ref46","first-page":"7232","article-title":"Evaluating gradient inversion attacks and defenses in federated learning","volume":"34","author":"huang","year":"2021","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref45","article-title":"Deep leakage from gradients","volume":"32","author":"zhu","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref48","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref47","author":"lecun","year":"1998","journal-title":"The MNIST Database of Handwritten Digits"},{"key":"ref42","author":"lee","year":"2019","journal-title":"Wide neural networks of any depth evolve as linear models under gradient descent"},{"key":"ref41","first-page":"305","author":"lan","year":"2020","journal-title":"Nonconvex Optimization"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3266233"},{"key":"ref43","article-title":"On lazy training in differentiable programming","volume":"32","author":"chizat","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref49","first-page":"1","article-title":"Reading digits in natural images with unsupervised feature learning","author":"netzer","year":"2011","journal-title":"Proc NIPS Workshop DL Unsupervised Feature Learn"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3450288"},{"key":"ref7","year":"2017","journal-title":"Federated learning Collaborative machine learning without centralized training data"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref4","first-page":"1","year":"2016","journal-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons With Regard to the Processing of Personal Data and on the Free Movement of Such Data and Repealing Directive 95\/46\/EC (GDPR)"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"234","DOI":"10.69554\/TCFN5165","article-title":"Understanding the scope and impact of the California consumer privacy act of 2018","volume":"2","author":"harding","year":"2019","journal-title":"Privacy and Data Protection"},{"key":"ref5","author":"klein","year":"2020","journal-title":"Canadian Privacy Data Protection and Policy for the Practitioner"},{"key":"ref40","author":"luigi","year":"2005","journal-title":"Gradient Flows in Metric Spaces and in the Space of Probability Measures"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3460427"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.3014246"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/FOCS.2007.66"},{"key":"ref31","first-page":"931","article-title":"Descent-to-delete: Gradient-based methods for machine unlearning","volume":"132","author":"neel","year":"2021","journal-title":"Proc 32nd Int Conf Algorithmic Learn Theory"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i5.16602"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3511997"},{"key":"ref2","article-title":"A survey of machine unlearning","author":"nguyen","year":"2022","journal-title":"arXiv 2209 02299"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17371"},{"key":"ref39","first-page":"3839","article-title":"Lipschitz regularity of deep neural networks: Analysis and efficient estimation","author":"scaman","year":"2018","journal-title":"Proc 32nd Int Conf Neural Inf Process Syst"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53641-4_24"},{"key":"ref24","first-page":"620","article-title":"A progressive batching L-BFGS method for machine learning","volume":"80","author":"bollapragada","year":"2018","journal-title":"Proc 35th Int Conf Mach Learn"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref26","first-page":"1885","article-title":"Understanding black-box predictions via influence functions","volume":"70","author":"koh","year":"2017","journal-title":"Proc 34th Int Conf Mach Learn"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2484028.2484070"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.08.007"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512222"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/IWQOS52092.2021.9521274"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58526-6_23"},{"key":"ref27","first-page":"1069","article-title":"Differentially private empirical risk minimization","volume":"12","author":"chaudhuri","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref29","article-title":"Neural tangent kernel: Convergence and generalization in neural networks","volume":"31","author":"jacot","year":"2018","journal-title":"Advances in neural information processing systems"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10189868.pdf?arnumber=10189868","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,24]],"date-time":"2024-10-24T20:21:01Z","timestamp":1729801261000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10189868\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":51,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3297905","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}