N. G. Marchant, B. I. P. Rubinstein, and S. Alfeld, “Hard to Forget: Poisoning Attacks on Certified Machine Unlearning”, AAAI, vol. 36, no. 7, pp. 7691-7700, Jun. 2022.