B. Song, D. Zhao, J. Xiang, Q. Xu, and Z. Yu, “Injection, Attack and Erasure: Revocable Backdoor Attacks via Machine Unlearning”, AAAI, vol. 40, no. 30, pp. 25518–25526, Mar. 2026.