Abstract:These days, deep learning models have achieved great success in multiple fields, from autonomous driving to medical diagnosis. These models have expanded the abilities of artificial intelligence by offering great solutions to complex problems that were very difficult to solve earlier. In spite of their unseen success in various, it has been identified, through research conducted, that deep learning models can be subjected to various attacks that compromise model security and data privacy of the Deep Neural Network models. Deep learning models can be subjected to various attacks at different stages of their lifecycle. During the testing phase, attackers can exploit vulnerabilities through different kinds of attacks such as Model Extraction Attacks, Model Inversion attacks, and Adversarial attacks. Model Extraction Attacks are aimed at reverse-engineering a trained deep learning model, with the primary objective of revealing its architecture and parameters. Model inversion attacks aim to compromise the privacy of the data used in the Deep learning model. These attacks are done to compromise the confidentiality of the model by going through the sensitive training data from the model's predictions. By analyzing the model's responses, attackers aim to reconstruct sensitive information. In this way, the model's data privacy is compromised. Adversarial attacks, mainly employed on computer vision models, are made to corrupt models into confidently making incorrect predictions through malicious testing data. These attacks subtly alter the input data, making it look normal but misleading deep learning models to make incorrect decisions. Such attacks can happen during both the model's evaluation and training phases. Data Poisoning Attacks add harmful data to the training set, disrupting the learning process and reducing the reliability of the deep learning mode.

Evaluation of Inference Attack Models for Deep Learning on Medical Data

Private Data Inference Attacks against Cloud: Model, Technologies, and Research Directions

The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks

A GAN-Based Defense Framework Against Model Inversion Attacks.

Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses

Model Inversion Attacks: A Survey of Approaches and Countermeasures

Holistic risk assessment of inference attacks in machine learning

Black-box Model Inversion Attribute Inference Attacks on Classification Models

Security and Privacy Challenges in Deep Learning Models

Understanding adversarial attacks on deep learning based medical image analysis systems

Towards evaluating the robustness of deep diagnostic models by adversarial attack

Securing the Diagnosis of Medical Imaging: An In-depth Analysis of AI-Resistant Attacks

Backdoor Attack on Deep Learning-Based Medical Image Encryption and Decryption Network

Enhancing Adversarial Defense for Medical Image Analysis Systems with Pruning and Attention Mechanism

Re-thinking Model Inversion Attacks Against Deep Neural Networks

Frequency Constraint-Based Adversarial Attack on Deep Neural Networks for Medical Image Classification.

An Analysis of the Vulnerability of Two Common Deep Learning-Based Medical Image Segmentation Techniques to Model Inversion Attacks

Privacy Analysis of Deep Learning in the Wild: Membership Inference Attacks against Transfer Learning

Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges

The Impact of Simultaneous Adversarial Attacks on Robustness of Medical Image Analysis

Reconciling privacy and accuracy in AI for medical imaging