Abstract:In the realm of medical diagnostics, the utilization of deep learning techniques, notably in the context of radiology images, has emerged as a transformative force. The significance of artificial intelligence (AI), specifically machine learning (ML) and deep learning (DL), lies in their capacity to rapidly and accurately diagnose diseases from radiology images. This capability has been particularly vital during the COVID-19 pandemic, where rapid and precise diagnosis played a pivotal role in managing the spread of the virus. DL models, trained on vast datasets of radiology images, have showcased remarkable proficiency in distinguishing between normal and COVID-19-affected cases, offering a ray of hope amidst the crisis. However, as with any technological advancement, vulnerabilities emerge. Deep learning-based diagnostic models, although proficient, are not immune to adversarial attacks. These attacks, characterized by carefully crafted perturbations to input data, can potentially disrupt the models' decision-making processes. In the medical context, such vulnerabilities could have dire consequences, leading to misdiagnoses and compromised patient care. To address this, we propose a two-phase defense framework that combines advanced adversarial learning and adversarial image filtering techniques. We use a modified adversarial learning algorithm to enhance the model's resilience against adversarial examples during the training phase. During the inference phase, we apply JPEG compression to mitigate perturbations that cause misclassification. We evaluate our approach on three models based on ResNet-50, VGG-16, and Inception-V3. These models perform exceptionally in classifying radiology images (X-ray and CT) of lung regions into normal, pneumonia, and COVID-19 pneumonia categories. We then assess the vulnerability of these models to three targeted adversarial attacks: fast gradient sign method (FGSM), projected gradient descent (PGD), and basic iterative method (BIM). The results show a significant drop in model performance after the attacks. However, our defense framework greatly improves the models' resistance to adversarial attacks, maintaining high accuracy on adversarial examples. Importantly, our framework ensures the reliability of the models in diagnosing COVID-19 from clean images.

Advancing diagnostic performance and clinical usability of neural networks via adversarial training and dual batch normalization

Using Adversarial Images to Assess the Robustness of Deep Learning Models Trained on Diagnostic Images in Oncology

Robust and Interpretable COVID-19 Diagnosis on Chest X-ray Images using Adversarial Training

Deep neural models for automated multi-task diagnostic scan management—quality enhancement, view classification and report generation

Comparing Detection Schemes for Adversarial Images against Deep Learning Models for Cancer Imaging

Removing Adversarial Noise in X-ray Images via Total Variation Minimization and Patch-Based Regularization for Robust Deep Learning-based Diagnosis

Robust Medical Diagnosis: A Novel Two-Phase Deep Learning Framework for Adversarial Proof Disease Detection in Radiology Images

Adversarial Networks for Prostate Cancer Detection

Justifying Diagnosis Decisions by Deep Neural Networks

Adversarial Neural Networks in Medical Imaging Advancements and Challenges in Semantic Segmentation

Let UNet Play an Adversarial Game: Investigating the Effect of Adversarial Training in Enhancing Low-Resolution MRI

Improving Interpretability of Deep Neural Networks in Medical Diagnosis by Investigating the Individual Units

Learning Interpretable Microscopic Features of Tumor by Multi-task Adversarial CNNs To Improve Generalization

Refining Tuberculosis Detection in CXR Imaging: Addressing Bias in Deep Neural Networks via Interpretability

On Sensitivity and Robustness of Normalization Schemes to Input Distribution Shifts in Automatic MR Image Diagnosis

Domain aware medical image classifier interpretation by counterfactual impact analysis

Enhancing Adversarial Defense for Medical Image Analysis Systems with Pruning and Attention Mechanism

A general approach to improve adversarial robustness of DNNs for medical image segmentation and detection

Opening the black box of machine learning in radiology: can the proximity of annotated cases be a way?

Adversarial Networks for the Detection of Aggressive Prostate Cancer

A prior knowledge-guided distributionally robust optimization-based adversarial training strategy for medical image classification