# Machine Unlearning Attack on MNIST, Fashion-MNIST, SVHN, and CIFAR10 Aggregated Average Source: [Machine Unlearning Attack on MNIST, Fashion-MNIST, SVHN, and CIFAR10 Aggregated Average]() Collection index: [llms.txt]() Data updated: 2026-04-10T06:38:29.775Z Evaluation of Machine Unlearning Attack success rates (ASR) averaged across MNIST, Fashion-MNIST, SVHN, and CIFAR10 datasets. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Machine Unlearning Attack | | Dataset (including any stated split) | MNIST, Fashion-MNIST, SVHN, and CIFAR10 Aggregated Average | | Metric | ASR (NG) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 8 of 8 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [ASR (NG)](): Higher is better; unit: PERCENT. - [ASR (FT)](): Higher is better; unit: PERCENT. - [ASR (RL)](): Higher is better; unit: PERCENT. - [ASR (AU)](): Higher is better; unit: PERCENT. - [ASR (RT)](): Higher is better; unit: PERCENT. - [Average ASR](): Higher is better; unit: PERCENT. ## Recorded results | Method | ASR (NG) | Result date | Report paper | | --- | --- | --- | --- | | White-box Attack | 92.62 | Not recorded | 69d884117d0172140ec779fc | | White-box Attack | 92.5 | Not recorded | 69d884117d0172140ec779fc | | White-box Attack | 88 | Not recorded | 69d884117d0172140ec779fc | | White-box Attack | 85.25 | Not recorded | 69d884117d0172140ec779fc | | Black-box Attack | 77.87 | Not recorded | 69d884117d0172140ec779fc | | Black-box Attack | 77.75 | Not recorded | 69d884117d0172140ec779fc | | Black-box Attack | 72.87 | Not recorded | 69d884117d0172140ec779fc | | Black-box Attack | 72 | Not recorded | 69d884117d0172140ec779fc | ### White-box Attack ASR (NG): 92.62. Result ID: 69d8996447f34ce924c0d680. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Entropy","Attack Setting":"Based on Reverse Data"}. This record does not assert independent reproduction. ### White-box Attack ASR (NG): 92.5. Result ID: 69d8996447f34ce924c0d67f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Threshold","Attack Setting":"Based on Reverse Data"}. This record does not assert independent reproduction. ### White-box Attack ASR (NG): 88. Result ID: 69d8996447f34ce924c0d675. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Threshold","Data Source":"Reverse Data","Unlearning Scenario":"Multi-Class"}. This record does not assert independent reproduction. ### White-box Attack ASR (NG): 85.25. Result ID: 69d8996447f34ce924c0d676. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Entropy","Data Source":"Reverse Data","Unlearning Scenario":"Multi-Class"}. This record does not assert independent reproduction. ### Black-box Attack ASR (NG): 77.87. Result ID: 69d8996447f34ce924c0d681. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Threshold","Attack Setting":"Based on Reverse Data"}. This record does not assert independent reproduction. ### Black-box Attack ASR (NG): 77.75. Result ID: 69d8996447f34ce924c0d682. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Entropy","Attack Setting":"Based on Reverse Data"}. This record does not assert independent reproduction. ### Black-box Attack ASR (NG): 72.87. Result ID: 69d8996447f34ce924c0d677. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Threshold","Data Source":"Reverse Data","Unlearning Scenario":"Multi-Class"}. This record does not assert independent reproduction. ### Black-box Attack ASR (NG): 72. Result ID: 69d8996447f34ce924c0d678. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Classification Method":"Entropy","Data Source":"Reverse Data","Unlearning Scenario":"Multi-Class"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.