{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:08:53Z","timestamp":1783436933823,"version":"3.54.6"},"reference-count":91,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302192"],"award-info":[{"award-number":["62302192"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23A20303"],"award-info":[{"award-number":["U23A20303"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61825203"],"award-info":[{"award-number":["61825203"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62332007"],"award-info":[{"award-number":["62332007"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U22B2028"],"award-info":[{"award-number":["U22B2028"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science and Technology Major Project of Tibetan Autonomous Region of China","award":["XZ202201ZD0006G"],"award-info":[{"award-number":["XZ202201ZD0006G"]}]},{"name":"National Joint Engineering Research Center of Network Security Detection and Protection Technology"},{"name":"Guangdong Key Laboratory of Data Security and Privacy Preserving"},{"name":"Guangdong Hong Kong Joint Laboratory for Data Security and Privacy Protection"},{"name":"Engineering Research Center of Trustworthy Artificial Intelligence (AI), Ministry of Education"},{"name":"Research Grants Council (RGC) of Hong Kong","award":["11217620"],"award-info":[{"award-number":["11217620"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["11218521"],"award-info":[{"award-number":["11218521"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["11218322"],"award-info":[{"award-number":["11218322"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["R6021-20F"],"award-info":[{"award-number":["R6021-20F"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["R1012-21"],"award-info":[{"award-number":["R1012-21"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["RFS2122-1S04"],"award-info":[{"award-number":["RFS2122-1S04"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["C2004-21G"],"award-info":[{"award-number":["C2004-21G"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["C1029-22G"],"award-info":[{"award-number":["C1029-22G"]}]},{"name":"Research Grants Council (RGC) of Hong Kong","award":["N_CityU139\/21"],"award-info":[{"award-number":["N_CityU139\/21"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2024.3358993","type":"journal-article","created":{"date-parts":[[2024,1,29]],"date-time":"2024-01-29T18:38:54Z","timestamp":1706553534000},"page":"3309-3323","source":"Crossref","is-referenced-by-count":22,"title":["Proof of Unlearning: Definitions and Instantiation"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5876-7875","authenticated-orcid":false,"given":"Jiasi","family":"Weng","sequence":"first","affiliation":[{"name":"College of Cyber Security, Jinan University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shenglong","family":"Yao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Kowloon Tong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1091-6832","authenticated-orcid":false,"given":"Yuefeng","family":"Du","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Kowloon Tong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junjie","family":"Huang","sequence":"additional","affiliation":[{"name":"College of Cyber Security, Jinan University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4067-8230","authenticated-orcid":false,"given":"Jian","family":"Weng","sequence":"additional","affiliation":[{"name":"College of Cyber Security, Jinan University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0547-315X","authenticated-orcid":false,"given":"Cong","family":"Wang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Kowloon Tong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Guidance on the AI Auditing Framework","year":"2020"},{"key":"ref2","volume-title":"Intel(r) Software Guard Extensions (Intel SGX)","year":"2015"},{"key":"ref3","volume-title":"California Consumer Privacy Act (CCPA)","year":"2018"},{"key":"ref4","volume-title":"Facebook Blames a Bug for Not Deleting Your Deleted Videos","year":"2018"},{"key":"ref5","volume-title":"10th Generation Intel Core Processor Families Data Sheet","year":"2020"},{"key":"ref6","volume-title":"Microsoft Azure Machine Learning (Azure ML)","year":"2023"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978358"},{"key":"ref8","volume-title":"Alibaba Cloud","year":"2021"},{"issue":"4","key":"ref9","volume-title":"Trustzone: Integrated hardware and software security","volume":"3","author":"Alves","year":"2004"},{"key":"ref10","first-page":"1","article-title":"Innovative technology for CPU based attestation and sealing","volume-title":"Proc. HASP","volume":"13","author":"Anati"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3508398.3511503"},{"key":"ref12","year":"2020","journal-title":"Instead of Deleting Account, New York Times Appends \u20181000\u2019 to Username and Email Address"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1504\/IJIPSI.2011.043729"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"ref16","first-page":"267","article-title":"The secret sharer: Evaluating and testing unintended memorization in neural networks","volume-title":"Proc. USENIX Secur.","author":"Carlini"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2012.57"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3511997"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00020"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484756"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559352"},{"key":"ref22","volume-title":"California Company Settles FTC Allegations it Deceived Consumers About Use of Facial Recognition in Photo Storage App","year":"2021"},{"key":"ref23","author":"Costan","year":"2016","journal-title":"Intel SGX Explained"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3061639.3062276"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339814"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2674005.2674994"},{"key":"ref27","volume-title":"Dropbox Bug Sends Years-Old Deleted Files Back to User Accounts","year":"2017"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0079"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3485919"},{"key":"ref30","article-title":"VeriFi: Towards verifiable federated unlearning","author":"Gao","year":"2022","journal-title":"arXiv:2205.12709"},{"key":"ref31","first-page":"1","article-title":"Making ai forget you: Data deletion in machine learning","volume-title":"Proc. NIPS","author":"Ginart"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58526-6_23"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00932"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3516514"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17373-8_19"},{"key":"ref36","first-page":"3832","article-title":"Certified data removal from machine learning models","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guo"},{"key":"ref37","first-page":"1","article-title":"Adaptive machine unlearning","volume-title":"Proc. NIPS","author":"Gupta"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00368"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480112"},{"key":"ref40","first-page":"793","article-title":"EMA: Auditing data removal from trained models","volume-title":"Proc. MICCAI","author":"Huang"},{"key":"ref41","article-title":"Chiron: Privacy-preserving machine learning as a service","author":"Hunt","year":"2018","journal-title":"arXiv:1803.05961"},{"key":"ref42","article-title":"Efficient deep learning on multisource private data","author":"Hynes","year":"2018","journal-title":"arXiv:1807.06689"},{"key":"ref43","volume-title":"IBM Cloud Data Shield","year":"2020"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3152701.3152709"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00106"},{"key":"ref46","author":"Karlis","year":"2019","journal-title":"You Just Deleted Facebook. Can You Trust Facebook to Delete Your Data?"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3314129"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3345447"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484575"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59710-8_10"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796721"},{"key":"ref52","first-page":"14876","article-title":"Goten: GPU-outsourcing trusted execution of neural network training","volume-title":"Proc. AAAI","author":"Lucien"},{"key":"ref53","article-title":"A survey of machine unlearning","author":"Nguyen","year":"2022","journal-title":"arXiv:2209.02299"},{"key":"ref54","first-page":"619","article-title":"Oblivious multi-party machine learning on trusted processors","volume-title":"Proc. USENIX Secur.","author":"Ohrimenko"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00019"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24065"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.jalgor.2003.12.002"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-56620-7_10"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.28"},{"issue":"1","key":"ref60","first-page":"294","article-title":"Regulation (EU) 2016\/679 of the European parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95\/46","volume":"59","author":"Regulation","year":"2016","journal-title":"Off. J. Eur. Union"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3453930"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-018-3523-0"},{"key":"ref63","first-page":"18075","article-title":"Remember what you want to forget: Algorithms for machine unlearning","volume-title":"Proc. NIPS","author":"Sekhari"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-56877-1_25"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3410463.3414631"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref67","first-page":"18021","article-title":"Manipulating SGD with data ordering attacks","volume-title":"Proc. NIPS","author":"Shumailov"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3447543"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2466448"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0072"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39658-1_2"},{"key":"ref72","author":"Terdiman","year":"2015","journal-title":"Why Deleting Personal Information on the Internet is a Fool\u2019s Errand"},{"key":"ref73","first-page":"4007","article-title":"On the necessity of auditable algorithmic definitions for machine unlearning","volume-title":"Proc. USENIX Secur.","author":"Thudi"},{"key":"ref74","article-title":"Privado: Practical and secure DNN inference with enclaves","author":"Grover","year":"2018","journal-title":"arXiv:1810.00602"},{"key":"ref75","first-page":"1","article-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware","volume-title":"Proc. ICML","author":"Tramer"},{"key":"ref76","first-page":"601","article-title":"Stealing machine learning models via predictio APIs","volume-title":"Proc. USENIX Secur.","author":"Tramer"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp.2017.28"},{"key":"ref78","author":"van Schaik","year":"2020","journal-title":"SGAXE: How SGX Fails in Practice"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.08.007"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/2641562"},{"key":"ref81","first-page":"1","article-title":"Inductive graph unlearning","volume-title":"Proc. USENIX Secur.","author":"Wang"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2009.5201385"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5462173"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/2078827.2078841"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23087"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00056"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00022"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833596"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155414"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3068195"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00045"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10416191.pdf?arnumber=10416191","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T08:28:31Z","timestamp":1710404911000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10416191\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":91,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3358993","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}