{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,3]],"date-time":"2026-09-03T15:07:59Z","timestamp":1788448079732,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":72,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T00:00:00Z","timestamp":1745280000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/https:\/\/doi.org\/10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302348, 62341410, 62472327"],"award-info":[{"award-number":["62302348, 62341410, 62472327"]}],"id":[{"id":"10.13039\/https:\/\/doi.org\/10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/https:\/\/doi.org\/10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2023YFE0205700"],"award-info":[{"award-number":["2023YFE0205700"]}],"id":[{"id":"10.13039\/https:\/\/doi.org\/10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Key R&D Program of Hubei Province","award":["2023BAB077"],"award-info":[{"award-number":["2023BAB077"]}]},{"name":"Science and Technology Development Fund, Macao S.A.R (FDCT)","award":["0078\/2023\/AMJ"],"award-info":[{"award-number":["0078\/2023\/AMJ"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,4,28]]},"DOI":"10.1145\/3696410.3714823","type":"proceedings-article","created":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T18:47:11Z","timestamp":1745347631000},"page":"3783-3793","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Aegis: Post-Training Attribute Unlearning in Federated Recommender Systems against Attribute Inference Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-7090-3666","authenticated-orcid":false,"given":"Wenhan","family":"Wu","sequence":"first","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, Hubei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0051-0046","authenticated-orcid":false,"given":"Jiawei","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, Hubei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9051-3242","authenticated-orcid":false,"given":"Chuang","family":"Hu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Internet of Things for Smart City, University of Macau, Macau, Macao"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,4,22]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_1_2_1","volume-title":"Kuan Eeik Tan, and Adrian Flanagan","author":"Ammad-Ud-Din Muhammad","year":"2019","unstructured":"Muhammad Ammad-Ud-Din, Elena Ivannikova, Suleiman A Khan, Were Oyomno, Qiang Fu, Kuan Eeik Tan, and Adrian Flanagan. 2019. Federated Collaborative Filtering for Privacy-preserving Personalized Recommendation System. arXiv:1901.09888"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i10.28965"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3336191.3371832"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3365828"},{"key":"e_1_3_2_1_6_1","volume-title":"Machine Unlearning. In 2021 IEEE Symposium on Security and Privacy. IEEE, Virtual Event","author":"Bourtoule Lucas","year":"2021","unstructured":"Lucas Bourtoule, Varun Chandrasekaran, Christopher A Choquette-Choo, Hengrui Jia, Adelin Travers, Baiwu Zhang, David Lie, and Nicolas Papernot. 2021. Machine Unlearning. In 2021 IEEE Symposium on Security and Privacy. IEEE, Virtual Event, San Francisco, CA, USA, 141--159."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"\u00d2scar Celma Herrada et al. 2009. Music Recommendation and Discovery in the Long Tail. Universitat Pompeu Fabra Barcelona Spain.","DOI":"10.1007\/978-3-642-13287-2"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2020.3014880"},{"key":"e_1_3_2_1_9_1","volume-title":"Recommendation Unlearning. In Proceedings of the ACM Web Conference","author":"Chen Chong","year":"2022","unstructured":"Chong Chen, Fei Sun, Min Zhang, and Bolin Ding. 2022. Recommendation Unlearning. In Proceedings of the ACM Web Conference 2022. ACM, Virtual Event, Lyon, France, 2768--2777."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00750"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3265506"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/963770.963776"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3307334.3328657"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3077136.3080722"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"e_1_3_2_1_16_1","volume-title":"Abdessamad Imine, and Micha\u00ebl Rusinowitch.","author":"Eidizadehakhcheloo Sanaz","year":"2021","unstructured":"Sanaz Eidizadehakhcheloo, Bizhan Alipour Pijani, Abdessamad Imine, and Micha\u00ebl Rusinowitch. 2021. Divide-and-learn: A Random Indexing Approach to Attribute Inference Attacks in Online Social Networks. In Data and Applications Security and Privacy XXXV: 35th Annual IFIP WG 11.3 Conference. Springer, Calgary, Canada, 338--354."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3459637.3482145"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Tiantian Feng Raghuveer Peri and Shrikanth Narayanan. 2022. User-level Differential Privacy against Attribute Inference Attack of Speech Emotion Recognition in Federated Learning. arXiv:2204.02500","DOI":"10.21437\/Interspeech.2022-10060"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i11.29092"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477495.3531820"},{"key":"e_1_3_2_1_21_1","first-page":"2921","article-title":"Social Recommendation with Characterized Regularization","volume":"34","author":"Gao Chen","year":"2020","unstructured":"Chen Gao, Nian Li, Tzu-Heng Lin, Dongsheng Lin, Jun Zhang, Yong Li, and Depeng Jin. 2020. Social Recommendation with Characterized Regularization. IEEE Transactions on Knowledge and Data Engineering 34, 6 (2020), 2921--2933.","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"e_1_3_2_1_22_1","unstructured":"Tao Guo Song Guo Jiewei Zhang Wenchao Xu and Junxiao Wang. 2022. Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representations. arXiv:2202.13295"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2827872"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2806416.2806502"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401063"},{"key":"e_1_3_2_1_26_1","volume-title":"Jiawei Jiang, and Dazhao Cheng.","author":"Hu Chuang","year":"2024","unstructured":"Chuang Hu, Nanxi Wu, Siping Shi, Xuan Liu, Wenhan Wu, Bing Luo, Kanye Ye Wang, Jiawei Jiang, and Dazhao Cheng. 2024. PriFairFed: A Local Differentially Private Federated Learning Algorithm for Client-Level Fairness. IEEE Transactions on Mobile Computing Early Access, N\/A (2024), 1--12."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3616855.3635830"},{"key":"e_1_3_2_1_28_1","first-page":"1637","article-title":"California Consumer Privacy Act","volume":"75","author":"Illman Erin","year":"2019","unstructured":"Erin Illman and Paul Temple. 2019. California Consumer Privacy Act. The Business Lawyer 75, 1 (2019), 1637--1646.","journal-title":"The Business Lawyer"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2229012.2229065"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/582415.582418"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560663"},{"key":"e_1_3_2_1_32_1","volume-title":"27th USENIX Security Symposium. USENIX","author":"Jia Jinyuan","year":"2018","unstructured":"Jinyuan Jia and Neil Zhenqiang Gong. 2018. AttriGuard: A Practical Defense against Attribute Inference Attacks via Adversarial Machine Learning. In 27th USENIX Security Symposium. USENIX, Baltimore, MD, USA, 513--529."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3209978.3210054"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401072"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-023-17321-6"},{"key":"e_1_3_2_1_36_1","volume-title":"Stochastic Gradient Descent","author":"Ketkar Nikhil","unstructured":"Nikhil Ketkar. 2017. Stochastic Gradient Descent. Apress, Berkeley, CA, 113--132."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30118"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177729694"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3604915.3608862"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103336"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2023.111124"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612418"},{"key":"e_1_3_2_1_43_1","volume-title":"Federated Recommendation with Additive Personalization. In The Twelfth International Conference on Learning Representations. ICLR","author":"Li Zhiwei","year":"2025","unstructured":"Zhiwei Li, Guodong Long, and Tianyi Zhou. 2025. Federated Recommendation with Additive Personalization. In The Twelfth International Conference on Learning Representations. ICLR, Singapore."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i5.16546"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2020.3017205"},{"key":"e_1_3_2_1_46_1","unstructured":"Wenyan Liu Juncheng Wan Xiaoling Wang Weinan Zhang Dell Zhang and Hang Li. 2022. Forgetting Fast in Recommender Systems. arXiv:2208.06875"},{"key":"e_1_3_2_1_47_1","volume-title":"31st USENIX Security Symposium. USENIX","author":"Liu Yugeng","year":"2022","unstructured":"Yugeng Liu, Rui Wen, Xinlei He, Ahmed Salem, Zhikun Zhang, Michael Backes, Emiliano De Cristofaro, Mario Fritz, and Yang Zhang. 2022. ML-Doctor: Holistic Risk Assessment of Inference Attacks against Machine Learning Models. In 31st USENIX Security Symposium. USENIX, Boston, MA, USA, 4525--4542."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3501815"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-23470-5"},{"key":"e_1_3_2_1_50_1","volume-title":"Proceedings of the 20th International Conference on Artificial Intelligence and Statistics. PMLR","author":"McMahan Brendan","year":"2017","unstructured":"Brendan McMahan, Eider Moore, Daniel Ramage, Seth Hampson, and Blaise Aguera y Arcas. 2017. Communication-efficient Learning of Deep Networks from Decentralized Data. In Proceedings of the 20th International Conference on Artificial Intelligence and Statistics. PMLR, Fort Lauderdale, FL, USA, 1273--1282."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460231.3474262"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403176"},{"key":"e_1_3_2_1_53_1","volume-title":"Membership Inference Attack on Graph Neural Networks. In 2021 Third IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications. IEEE, Virtual Event, 11--20","author":"Olatunji Iyiola E","year":"2021","unstructured":"Iyiola E Olatunji,Wolfgang Nejdl, and Megha Khosla. 2021. Membership Inference Attack on Graph Neural Networks. In 2021 Third IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications. IEEE, Virtual Event, 11--20."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.5555\/1756123.1756146"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2022.108441"},{"key":"e_1_3_2_1_56_1","volume-title":"Proceedings of the Twenty-Fifth Conference on Uncertainty in Artificial Intelligence. AUAI Press","author":"Rendle Steffen","year":"2009","unstructured":"Steffen Rendle, Christoph Freudenthaler, Zeno Gantner, and Lars Schmidt-Thieme. 2009. BPR: Bayesian Personalized Ranking from Implicit Feedback. In Proceedings of the Twenty-Fifth Conference on Uncertainty in Artificial Intelligence. AUAI Press, Aachen, Germany, 452--461."},{"key":"e_1_3_2_1_57_1","volume-title":"Ml-leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. arXiv:1806.01246","author":"Salem Ahmed","year":"2018","unstructured":"Ahmed Salem, Yang Zhang, Mathias Humbert, Pascal Berrang, Mario Fritz, and Michael Backes. 2018. Ml-leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. arXiv:1806.01246"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/18.suppl_2.S231"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3354924"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3336191.3371855"},{"key":"e_1_3_2_1_62_1","volume-title":"Proceedings of the 21th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. ACM, Sydney NSW, Australia, 1235--1244","author":"Yeung Dit-Yan","year":"2015","unstructured":"HaoWang, NaiyanWang, and Dit-Yan Yeung. 2015. Collaborative Deep Learning for Recommender Systems. In Proceedings of the 21th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. ACM, Sydney NSW, Australia, 1235--1244."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"e_1_3_2_1_64_1","volume-title":"Fedgnn: Federated Graph Neural Network for Privacy-preserving Recommendation. arXiv:2102.04925","author":"Wu Chuhan","year":"2021","unstructured":"Chuhan Wu, Fangzhao Wu, Yang Cao, Yongfeng Huang, and Xing Xie. 2021. Fedgnn: Federated Graph Neural Network for Privacy-preserving Recommendation. arXiv:2102.04925"},{"key":"e_1_3_2_1_65_1","unstructured":"Chen Wu Sencun Zhu and Prasenjit Mitra. 2022. Federated Unlearning with Knowledge Distillation. arXiv:2201.09441"},{"key":"e_1_3_2_1_66_1","first-page":"1","article-title":"Graph Neural Networks in Recommender Systems: a","volume":"55","author":"Wu Shiwen","year":"2022","unstructured":"Shiwen Wu, Fei Sun, Wentao Zhang, Xu Xie, and Bin Cui. 2022. Graph Neural Networks in Recommender Systems: a Survey. Comput. Surveys 55, 5 (2022), 1--37.","journal-title":"Survey. Comput. Surveys"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2024.3379240"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/447"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2021.106946"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3539597.3570463"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449813"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3295601"}],"event":{"name":"WWW '25: The ACM Web Conference 2025","location":"Sydney NSW Australia","acronym":"WWW '25","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM on Web Conference 2025"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696410.3714823","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3696410.3714823","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T21:18:42Z","timestamp":1750281522000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696410.3714823"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,22]]},"references-count":72,"alternative-id":["10.1145\/3696410.3714823","10.1145\/3696410"],"URL":"https:\/\/doi.org\/10.1145\/3696410.3714823","relation":{},"subject":[],"published":{"date-parts":[[2025,4,22]]},"assertion":[{"value":"2025-04-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}