The paper investigates how federated unlearning systems that broadcast updated linear classifiers after each client update can inadvertently leak the compact, additive summaries used for deletion. By submitting known changes and analyzing the returned classifiers, an attacker can recover the deleted sample’s class or even reinstate it. Experiments on MNIST and CIFAR‑10 show that high‑precision broadcasts enable exact label recovery, while lower precision limits fine‑grained recovery and diverse responses can prevent identification.
By Yijun Quan, Giovanni Montana
arXiv:2610. 34934v1 Announce Type: new Abstract: Machine learning systems trained on untrusted data are vulnerable to data and backdoor poisoning attacks, in which an adversary corrupts training and test samples to manipulate predictions at inference time.
By Evan Rose, Alina Oprea
The paper presents a fast machine unlearning method that uses Hessian analysis to identify correlated training data and applies a closed‑form update rule. This approach achieves an 82× speedup over traditional influence‑function unlearning while maintaining or slightly improving model accuracy. Experiments on seven dataset‑architecture pairs, including CIFAR‑100 with ResNet‑50, show strong forgetting performance and low vulnerability to membership inference attacks.
By Ayushi Thakur, Ruchir Gupta, Amit Kumar Jaiswal, Prayag Tiwari
arXiv:2605.14605v3 Announce Type: replace-cross
Abstract: Model providers increasingly release the weights of large language models. Although these models are safety-aligned before release, their saf...
By Itay Zloczower, Eyal Lenga, Gilad Gressel, Yisroel Mirsky
arXiv:2602. 06911v2 Announce Type: replace-cross Abstract: As increasingly capable open-weight large language models (LLMs) are deployed, improving their tamper resistance against unsafe modifications, whether accidental or intentional, becomes critical to minimize risks.
By Saad Hossain, Tom Tseng, Punya Syon Pandey, Samanvay Vajpayee, Matthew Kowal, Nayeema Nonta, Samuel Simko, Stephen Casper, Zhijing Jin, Kellin Pelrine, Sirisha Rambhatla
arXiv:2412. 09119v3 Announce Type: replace Abstract: Machine unlearning, the process of selectively removing data from trained models, is increasingly crucial for addressing privacy concerns and knowledge gaps post-deployment.
By Youssef Allouah, Joshua Kazdan, Rachid Guerraoui, Sanmi Koyejo