Adversarial Attacks on Medical Image Classification

Min Jen Tsai*, Ping Yi Lin, Ming En Lee

*此作品的通信作者

研究成果: Article同行評審

11 引文 斯高帕斯(Scopus)

摘要

Due to the growing number of medical images being produced by diverse radiological imaging techniques, radiography examinations with computer-aided diagnoses could greatly assist clinical applications. However, an imaging facility with just a one-pixel inaccuracy will lead to the inaccurate prediction of medical images. Misclassification may lead to the wrong clinical decision. This scenario is similar to the adversarial attacks on deep learning models. Therefore, one-pixel and multi-pixel level attacks on a Deep Neural Network (DNN) model trained on various medical image datasets are investigated in this study. Common multiclass and multi-label datasets are examined for one-pixel type attacks. Moreover, different experiments are conducted in order to determine how changing the number of pixels in the image may affect the classification performance and robustness of diverse DNN models. The experimental results show that it was difficult for the medical images to survive the pixel attacks, raising the issue of the accuracy of medical image classification and the importance of the model’s ability to resist these attacks for a computer-aided diagnosis.

原文English
文章編號4228
期刊Cancers
15
發行號17
DOIs
出版狀態Published - 9月 2023

指紋

深入研究「Adversarial Attacks on Medical Image Classification」主題。共同形成了獨特的指紋。

引用此