@inproceedings {279996, author = {Anvith Thudi and Hengrui Jia and Ilia Shumailov and Nicolas Papernot}, title = {On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning}, booktitle = {31st USENIX Security Symposium (USENIX Security 22)}, year = {2022}, isbn = {978-1-939133-31-1}, address = {Boston, MA}, pages = {4007--4022}, url = {https://www.usenix.org/conference/usenixsecurity22/presentation/thudi}, publisher = {USENIX Association}, month = aug } @inproceedings {272262, author = {Hengrui Jia and Christopher A. Choquette-Choo and Varun Chandrasekaran and Nicolas Papernot}, title = {Entangled Watermarks as a Defense against Model Extraction}, booktitle = {30th USENIX Security Symposium (USENIX Security 21)}, year = {2021}, isbn = {978-1-939133-24-3}, pages = {1937--1954}, url = {https://www.usenix.org/conference/usenixsecurity21/presentation/jia}, publisher = {USENIX Association}, month = aug }