Abstract:Deep Neural Networks (DNNs) have been shown to be vulnerable to adversarial examples. The existence of adversarial examples significantly hinders the development of deep learning technologies in domains with high-security requirements. However, current defense methods often lack universality, being effective only against specific adversarial attacks. This study focuses on analyzing adversarial examples through changes in model attention, classifying attack algorithms into attention-shifting and attention-attenuation categories. To counter attention-shifting attacks, a defense module named Feature Pyramid-based Attention Space-guided (FPAS) is proposed, which spatially retracts the shifting attention in adversarial examples, thereby enhancing the model's overall defense capability. Attention-based Non-Local (ANL) is a proposed defense module to counter attention-attenuation attacks. This module enhances the model's focus on critical features, efficiently constructing a robust defense model with low implementation cost and minimal intrusion into the original model. By integrating FPAS and ANL into the Wide-ResNet model within a boosting framework, the study demonstrates their synergistic defense capability. Even with eight adversarial samples embedded with adversarial patches, our FPAS_at and ANL_at models demonstrated significant improvements over the baseline, enhancing the average defense rate by 5.47% and 7.74%, respectively. Extensive experiments confirm that this universal defense strategy offers comprehensive protection against adversarial attacks at a lower implementation cost compared to current mainstream defense methods, while also being adaptable for integration with existing defense strategies to further enhance adversarial robustness.

Nowhere to Hide: Toward Robust Reactive Medical Adversarial Defense

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Medical Aegis: Robust adversarial protectors for medical images

Enhancing Adversarial Defense for Medical Image Analysis Systems with Pruning and Attention Mechanism

Adversarial Medical Image with Hierarchical Feature Hiding

A Feature Space-Restricted Attention Attack on Medical Deep Learning Systems

Adversarial examples: attacks and defences on medical deep learning systems

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

A Comprehensive Review and Analysis of Deep Learning-Based Medical Image Adversarial Attack and Defense

A Hierarchical Feature Constraint to Camouflage Medical Adversarial Attacks

Adversarial Attacks Against Medical Deep Learning Systems

MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis

Robust Convolutional Neural Networks Against Adversarial Attacks on Medical Images

Towards evaluating the robustness of deep diagnostic models by adversarial attack

Robustness in deep learning models for medical diagnostics: security and adversarial challenges towards robust AI applications

Understanding adversarial attacks on deep learning based medical image analysis systems

Adversarial Attack and Defense in Breast Cancer Deep Learning Systems

The Impact of Simultaneous Adversarial Attacks on Robustness of Medical Image Analysis

Frequency Constraint-Based Adversarial Attack on Deep Neural Networks for Medical Image Classification.

Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges

Defending Against Adversarial Attacks On Medical Imaging Ai System, Classification Or Detection?