Marchant, N. G.; Rubinstein, B. I. P.; Alfeld, S. Hard to Forget: Poisoning Attacks on Certified Machine Unlearning. AAAI 2022, 36, 7691-7700.