{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T15:32:07Z","timestamp":1784820727308,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":38,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733799.3762971","type":"proceedings-article","created":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:38:49Z","timestamp":1767094729000},"page":"111-122","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Federated Unlearning using Tree-based Sharding"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-0660-2872","authenticated-orcid":false,"given":"Christian","family":"Troiani","sequence":"first","affiliation":[{"name":"Institute of Cryptography and Cybersecurity (IC2), University of Wollongong, Wollongong, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1562-5105","authenticated-orcid":false,"given":"Willy","family":"Susilo","sequence":"additional","affiliation":[{"name":"Institute of Cryptography and Cybersecurity (IC2), University of Wollongong, Wollongong, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3348-7014","authenticated-orcid":false,"given":"Yang-Wai","family":"Chow","sequence":"additional","affiliation":[{"name":"Institute of Cryptography and Cybersecurity (IC2), University of Wollongong, Wollongong, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4407-9027","authenticated-orcid":false,"given":"Yannan","family":"Li","sequence":"additional","affiliation":[{"name":"Institute of Cryptography and Cybersecurity (IC2), University of Wollongong, Wollongong, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,12,30]]},"reference":[{"key":"e_1_3_3_2_2_2","doi-asserted-by":"publisher","unstructured":"Mohammad Al-Rubaie and J.\u00a0Morris Chang. 2019. Privacy-Preserving Machine Learning: Threats and Solutions. IEEE S&P 17 2 (2019) 49\u201358. 10.1109\/MSEC.2018.2888775","DOI":"10.1109\/MSEC.2018.2888775"},{"key":"e_1_3_3_2_3_2","series-title":"Proceedings of Machine Learning Research","first-page":"2938","volume-title":"The 23rd International Conference on Artificial Intelligence and Statistics, AISTATS 2020, 26-28 August 2020, Online [Palermo, Sicily, Italy]","volume":"108","author":"Bagdasaryan Eugene","year":"2020","unstructured":"Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov. 2020. How To Backdoor Federated Learning. In The 23rd International Conference on Artificial Intelligence and Statistics, AISTATS 2020, 26-28 August 2020, Online [Palermo, Sicily, Italy](Proceedings of Machine Learning Research, Vol.\u00a0108), Silvia Chiappa and Roberto Calandra (Eds.). PMLR, 2938\u20132948. http:\/\/proceedings.mlr.press\/v108\/bagdasaryan20a.html"},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","unstructured":"S\u00f6ren Becker Johanna Vielhaben Marcel Ackermann Klaus-Robert M\u00fcller Sebastian Lapuschkin and Wojciech Samek. 2023. AudioMNIST: Exploring Explainable Artificial Intelligence for audio analysis on a simple benchmark. Journal of the Franklin Institute (2023). 10.1016\/j.jfranklin.2023.11.038","DOI":"10.1016\/j.jfranklin.2023.11.038"},{"key":"e_1_3_3_2_5_2","first-page":"1","volume-title":"Proc. Workshop Secur. Mach. Learn.(SecML) 32nd Conf. Neural Inf. Process. Syst.(NeurIPS)","author":"Bhagoji Arjun\u00a0Nitin","year":"2018","unstructured":"Arjun\u00a0Nitin Bhagoji, Supriyo Chakraborty, Prateek Mittal, and Seraphin Calo. 2018. Model poisoning attacks in federated learning. In Proc. Workshop Secur. Mach. Learn.(SecML) 32nd Conf. Neural Inf. Process. Syst.(NeurIPS). 1\u201323."},{"key":"e_1_3_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179336"},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"e_1_3_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-55639-5_3"},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","unstructured":"Seyda Ertekin L\u00e9on Bottou and C.\u00a0Lee Giles. 2011. Nonconvex Online Support Vector Machines. IEEE Trans. Pattern Anal. Mach. Intell. 33 2 (2011) 368\u2013381. 10.1109\/TPAMI.2010.109","DOI":"10.1109\/TPAMI.2010.109"},{"key":"e_1_3_3_2_10_2","first-page":"1605","volume-title":"29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020","author":"Fang Minghong","year":"2020","unstructured":"Minghong Fang, Xiaoyu Cao, Jinyuan Jia, and Neil\u00a0Zhenqiang Gong. 2020. Local Model Poisoning Attacks to Byzantine-Robust Federated Learning. In 29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, Srdjan Capkun and Franziska Roesner (Eds.). USENIX Association, 1605\u20131622. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/fang"},{"key":"e_1_3_3_2_11_2","series-title":"Proceedings of Machine Learning Research","first-page":"3457","volume-title":"International Conference on Artificial Intelligence and Statistics, 2-4 May 2024, Palau de Congressos, Valencia, Spain","volume":"238","author":"Fraboni Yann","year":"2024","unstructured":"Yann Fraboni, Martin\u00a0Van Waerebeke, Kevin Scaman, Richard Vidal, Laetitia Kameni, and Marco Lorenzi. 2024. SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimization. In International Conference on Artificial Intelligence and Statistics, 2-4 May 2024, Palau de Congressos, Valencia, Spain(Proceedings of Machine Learning Research, Vol.\u00a0238), Sanjoy Dasgupta, Stephan Mandt, and Yingzhen Li (Eds.). PMLR, 3457\u20133465. https:\/\/proceedings.mlr.press\/v238\/fraboni24a.html"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","unstructured":"Xiangshan Gao Xingjun Ma Jingyi Wang Youcheng Sun Bo Li Shouling Ji Peng Cheng and Jiming Chen. 2024. VeriFi: Towards Verifiable Federated Unlearning. IEEE Trans. Dependable Secur. Comput. 21 6 (2024) 5720\u20135736. 10.1109\/TDSC.2024.3382321","DOI":"10.1109\/TDSC.2024.3382321"},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/AIPR50011.2020.9425094"},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"publisher","unstructured":"Yu Jiang Jiyuan Shen Ziyao Liu Chee\u00a0Wei Tan and Kwok-Yan Lam. 2024. Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learning. CoRR abs\/2401.08216 (2024). 10.48550\/ARXIV.2401.08216 arXiv:https:\/\/arXiv.org\/abs\/2401.08216","DOI":"10.48550\/ARXIV.2401.08216"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","unstructured":"Ruinan Jin Minghui Chen Qiong Zhang and Xiaoxiao Li. 2023. Forgettable Federated Linear Learning with Certified Data Removal. CoRR abs\/2306.02216 (2023). 10.48550\/ARXIV.2306.02216 arXiv:https:\/\/arXiv.org\/abs\/2306.02216","DOI":"10.48550\/ARXIV.2306.02216"},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28169-3_7"},{"key":"e_1_3_3_2_17_2","unstructured":"Jakub Kone\u010dn\u00fd H.\u00a0Brendan McMahan Felix\u00a0X. Yu Peter Richt\u00e1rik Ananda\u00a0Theertha Suresh and Dave Bacon. 2016. Federated Learning: Strategies for Improving Communication Efficiency. CoRR abs\/1610.05492 (2016). arXiv:https:\/\/arXiv.org\/abs\/1610.05492http:\/\/arxiv.org\/abs\/1610.05492"},{"key":"e_1_3_3_2_18_2","volume-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky Alex","year":"2009","unstructured":"Alex Krizhevsky. 2009. Learning multiple layers of features from tiny images. Technical Report. Canadian Institute for Advanced Research."},{"key":"e_1_3_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/3453142.3491287"},{"key":"e_1_3_3_2_20_2","doi-asserted-by":"publisher","unstructured":"Yann LeCun L\u00e9on Bottou Yoshua Bengio and Patrick Haffner. 1998. Gradient-based learning applied to document recognition. Proc. IEEE 86 11 (1998) 2278\u20132324. 10.1109\/5.726791","DOI":"10.1109\/5.726791"},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-S60304.2024.00034"},{"key":"e_1_3_3_2_22_2","doi-asserted-by":"publisher","unstructured":"Yuyuan Li Chaochao Chen Xiaolin Zheng and Jiaming Zhang. 2023. Federated Unlearning via Active Forgetting. CoRR abs\/2307.03363 (2023). 10.48550\/ARXIV.2307.03363 arXiv:https:\/\/arXiv.org\/abs\/2307.03363","DOI":"10.48550\/ARXIV.2307.03363"},{"key":"e_1_3_3_2_23_2","first-page":"4551","volume-title":"Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence, IJCAI 2024, Jeju, South Korea, August 3-9, 2024","author":"Lin Yijing","year":"2024","unstructured":"Yijing Lin, Zhipeng Gao, Hongyang Du, Dusit Niyato, Gui Gui, Shuguang Cui, and Jinke Ren. 2024. Scalable Federated Unlearning via Isolated and Coded Sharding. In Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence, IJCAI 2024, Jeju, South Korea, August 3-9, 2024. ijcai.org, 4551\u20134559. https:\/\/www.ijcai.org\/proceedings\/2024\/503"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/IWQOS52092.2021.9521274"},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796721"},{"key":"e_1_3_3_2_26_2","doi-asserted-by":"publisher","unstructured":"Ziyao Liu Yu Jiang Jiyuan Shen Minyi Peng Kwok-Yan Lam and Xingliang Yuan. 2023. A Survey on Federated Unlearning: Challenges Methods and Future Directions. CoRR abs\/2310.20448 (2023). 10.48550\/ARXIV.2310.20448 arXiv:https:\/\/arXiv.org\/abs\/2310.20448","DOI":"10.48550\/ARXIV.2310.20448"},{"key":"e_1_3_3_2_27_2","series-title":"Proceedings of Machine Learning Research","first-page":"1273","volume-title":"Proceedings of the 20th International Conference on Artificial Intelligence and Statistics, AISTATS 2017, 20-22 April","volume":"54","author":"McMahan Brendan","year":"2017","unstructured":"Brendan McMahan, Eider Moore, Daniel Ramage, Seth Hampson, and Blaise\u00a0Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In Proceedings of the 20th International Conference on Artificial Intelligence and Statistics, AISTATS 2017, 20-22 April(Proceedings of Machine Learning Research, Vol.\u00a054), Aarti Singh and Xiaojin\u00a0(Jerry) Zhu (Eds.). PMLR, 1273\u20131282. http:\/\/proceedings.mlr.press\/v54\/mcmahan17a.html"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388946"},{"key":"e_1_3_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243855"},{"key":"e_1_3_3_2_30_2","volume-title":"Advances in Neural Information Processing Systems","author":"Park Jungwuk","year":"2021","unstructured":"Jungwuk Park, Dong-Jun Han, Minseok Choi, and Jaekyun Moon. 2021. Sageflow: Robust Federated Learning against Both Stragglers and Adversaries. In Advances in Neural Information Processing Systems, A.\u00a0Beygelzimer, Y.\u00a0Dauphin, P.\u00a0Liang, and J.\u00a0Wortman Vaughan (Eds.). https:\/\/openreview.net\/forum?id=rA9HFxFT7th"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"publisher","unstructured":"Felix Sattler Simon Wiedemann Klaus-Robert M\u00fcller and Wojciech Samek. 2020. Robust and Communication-Efficient Federated Learning From Non-i.i.d. Data. IEEE Trans. Neural Networks Learn. Syst. 31 9 (2020) 3400\u20133413. 10.1109\/TNNLS.2019.2944481","DOI":"10.1109\/TNNLS.2019.2944481"},{"key":"e_1_3_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00030"},{"key":"e_1_3_3_2_34_2","first-page":"1379","volume-title":"31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022","author":"Stevens Timothy","year":"2022","unstructured":"Timothy Stevens, Christian Skalka, Christelle Vincent, John Ring, Samuel Clark, and Joseph\u00a0P. Near. 2022. Efficient Differentially Private Secure Aggregation for Federated Learning via Hardness of Learning with Errors. In 31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022, Kevin R.\u00a0B. Butler and Kurt Thomas (Eds.). USENIX Association, 1379\u20131395. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/stevens"},{"key":"e_1_3_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"e_1_3_3_2_36_2","doi-asserted-by":"publisher","unstructured":"Stacey Truex Nathalie Baracaldo Ali Anwar Thomas Steinke Heiko Ludwig Rui Zhang and Yi Zhou. 2019. A Hybrid Approach to Privacy-Preserving Federated Learning - (Extended Abstract). Inform. Spektrum 42 5 (2019) 356\u2013357. 10.1007\/s00287-019-01205-x","DOI":"10.1007\/s00287-019-01205-x"},{"key":"e_1_3_3_2_37_2","volume-title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","author":"Xiao Han","year":"2017","unstructured":"Han Xiao, Kashif Rasul, and Roland Vollgraf. 2017. Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. Technical Report. arXiv:https:\/\/arXiv.org\/abs\/cs.LG\/1708.07747\u00a0[cs.LG]"},{"key":"e_1_3_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM58522.2023.00188"},{"key":"e_1_3_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1145\/3539597.3570463"}],"event":{"name":"AISec '25: Proceedings of the 2025 Workshop on Artificial Intelligence and Security","location":"Taipei , Taiwan","acronym":"AISec '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 18th ACM Workshop on Artificial Intelligence and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733799.3762971","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:52:27Z","timestamp":1767095547000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733799.3762971"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":38,"alternative-id":["10.1145\/3733799.3762971","10.1145\/3733799"],"URL":"https:\/\/doi.org\/10.1145\/3733799.3762971","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2025-12-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}