Abstract:It is known that deep neural networks (DNNs) are vulnerable to adversarial noises. Improving adversarial robustness of DNNs is essential. This is not only because unperceivable adversarial noise is a threat to the performance of DNNs models, but also adversarially robust DNNs have a strong resistance to the white noises that may present everywhere in the actual world. To improve adversarial robustness of DNNs, a variety of adversarial training methods have been proposed. Most of the previous methods are designed under one single application scenario: image classification. However, image segmentation, landmark detection, and object detection are more commonly observed than classifying the entire images in the medical imaging field. Although classification tasks and other tasks (e.g., regression) share some similarities, they also differ in certain ways, e.g., some adversarial training methods use misclassification criteria, which is well-defined in classification but not in regression. These restrictions/limitations hinder application of adversarial training for many medical imaging analysis tasks. In our work, the contributions are as follows: (1) We investigated the existing adversarial training methods and discovered the challenges that make those methods unsuitable for adaptation in segmentation and detection tasks. (2) We modified and adapted some existing adversarial training methods for medical image segmentation and detection tasks. (3) We proposed a general adversarial training method for medical image segmentation and detection. (4) We implemented our method in diverse medical imaging tasks using publicly available datasets, including MRI segmentation, Cephalometric landmark detection, and blood cell detection. The experiments substantiated the effectiveness of our method.

Adversarial Detection and Defense for Medical Ultrasound Images: from a Frequency Perspective

Frequency Constraint-Based Adversarial Attack on Deep Neural Networks for Medical Image Classification.

Understanding adversarial attacks on deep learning based medical image analysis systems

Adversarial examples: attacks and defences on medical deep learning systems

Adversarial attacks and defenses on AI in medical imaging informatics: A survey

Enhancing Adversarial Defense for Medical Image Analysis Systems with Pruning and Attention Mechanism

A Comprehensive Review and Analysis of Deep Learning-Based Medical Image Adversarial Attack and Defense

Defending Against Adversarial Attacks On Medical Imaging Ai System, Classification Or Detection?

Securing the Diagnosis of Medical Imaging: An In-depth Analysis of AI-Resistant Attacks

Nowhere to Hide: Toward Robust Reactive Medical Adversarial Defense

A general approach to improve adversarial robustness of DNNs for medical image segmentation and detection

Low-Sampling-Frequency Plane Wave Medical Ultrasound Imaging Based on Adversarial Learning

A Feature Space-Restricted Attention Attack on Medical Deep Learning Systems

Adversarial attacks on deep learning models for fatty liver disease classification by modification of ultrasound image reconstruction method

Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges

Contextual Adversarial Attack Against Aerial Detection in the Physical World

Adversarial Attack and Defense in Breast Cancer Deep Learning Systems

Robust Convolutional Neural Networks Against Adversarial Attacks on Medical Images

How Resilient Are Deep Learning Models in Medical Image Analysis? The Case of the Moment-Based Adversarial Attack (Mb-AdA)

A Hierarchical Feature Constraint to Camouflage Medical Adversarial Attacks

Comparing Detection Schemes for Adversarial Images against Deep Learning Models for Cancer Imaging