A Comprehensive Review and Analysis of Deep Learning-Based Medical Image Adversarial Attack and Defense

被引:15
作者
Muoka, Gladys W. [1 ]
Yi, Ding [1 ]
Ukwuoma, Chiagoziem C. [2 ]
Mutale, Albert [1 ]
Ejiyi, Chukwuebuka J. [1 ]
Mzee, Asha Khamis [1 ]
Gyarteng, Emmanuel S. A. [3 ]
Alqahtani, Ali [4 ,5 ]
Al-antari, Mugahed A. [6 ]
机构
[1] Univ Elect Sci & Technol China, Sch Informat & Software Engn, Chengdu 611731, Peoples R China
[2] Chengdu Univ Technol, Coll Nucl Technol & Automat Engn, Chengdu 610059, Peoples R China
[3] Univ Elect Sci & Technol China, Sch Comp Sci & Engn, Chengdu 611731, Peoples R China
[4] King Khalid Univ, Ctr Artificial Intelligence, Abha 61421, Saudi Arabia
[5] King Khalid Univ, Comp Sci Dept, Abha 61421, Saudi Arabia
[6] Sejong Univ, Coll Software & Convergence Technol, Daeyang AI Ctr, Dept Artificial Intelligence, Seoul 05006, South Korea
基金
新加坡国家研究基金会;
关键词
medical image analysis; deep learning; adversary attack; adversarial defense; deep neural networks; SEGMENTATION; CLASSIFICATION; ROBUSTNESS; PREDICTION; FRAMEWORK; NETWORKS;
D O I
10.3390/math11204272
中图分类号
O1 [数学];
学科分类号
0701 ; 070101 ;
摘要
Deep learning approaches have demonstrated great achievements in the field of computer-aided medical image analysis, improving the precision of diagnosis across a range of medical disorders. These developments have not, however, been immune to the appearance of adversarial attacks, creating the possibility of incorrect diagnosis with substantial clinical implications. Concurrently, the field has seen notable advancements in defending against such targeted adversary intrusions in deep medical diagnostic systems. In the context of medical image analysis, this article provides a comprehensive survey of current advancements in adversarial attacks and their accompanying defensive strategies. In addition, a comprehensive conceptual analysis is presented, including several adversarial attacks and defensive strategies designed for the interpretation of medical images. This survey, which draws on qualitative and quantitative findings, concludes with a thorough discussion of the problems with adversarial attack and defensive mechanisms that are unique to medical image analysis systems, opening up new directions for future research. We identified that the main problems with adversarial attack and defense in medical imaging include dataset and labeling, computational resources, robustness against target attacks, evaluation of transferability and adaptability, interpretability and explainability, real-time detection and response, and adversarial attacks in multi-modal fusion. The area of medical imaging adversarial attack and defensive mechanisms might move toward more secure, dependable, and therapeutically useful deep learning systems by filling in these research gaps and following these future objectives.
引用
收藏
页数:41
相关论文
共 181 条
[31]   Can AI Help in Screening Viral and COVID-19 Pneumonia? [J].
Chowdhury, Muhammad E. H. ;
Rahman, Tawsifur ;
Khandakar, Amith ;
Mazhar, Rashid ;
Kadir, Muhammad Abdul ;
Bin Mahbub, Zaid ;
Islam, Khandakar Reajul ;
Khan, Muhammad Salman ;
Iqbal, Atif ;
Al Emadi, Nasser ;
Reaz, Mamun Bin Ibne ;
Islam, Mohammad Tariqul .
IEEE ACCESS, 2020, 8 :132665-132676
[32]  
Codella N, 2019, Arxiv, DOI arXiv:1902.03368
[33]  
Croce F, 2020, PR MACH LEARN RES, V119
[34]   NSL-MHA-CNN: A Novel CNN Architecture for Robust Diabetic Retinopathy Prediction Against Adversarial Attacks [J].
Daanouni, Othmane ;
Cherradi, Bouchaib ;
Tmiri, Amal .
IEEE ACCESS, 2022, 10 :103987-103999
[35]   Improving adversarial robustness of medical imaging systems via adding global attention noise [J].
Dai, Yinyao ;
Qian, Yaguan ;
Lu, Fang ;
Wang, Bin ;
Gu, Zhaoquan ;
Wang, Wei ;
Wan, Jian ;
Zhang, Yanchun .
COMPUTERS IN BIOLOGY AND MEDICINE, 2023, 164
[36]  
Dawen Wu, 2020, IOP Conference Series: Materials Science and Engineering, V806, DOI 10.1088/1757-899X/806/1/012050
[37]   Towards Robust General Medical Image Segmentation [J].
Daza, Laura ;
Perez, Juan C. ;
Arbelaez, Pablo .
MEDICAL IMAGE COMPUTING AND COMPUTER ASSISTED INTERVENTION - MICCAI 2021, PT III, 2021, 12903 :3-13
[38]   Evaluation of the impact of physical adversarial attacks on deep learning models for classifying covid cases [J].
de Aguiar, Erikson J. ;
Marcomini, Karem D. ;
Quirino, Felipe A. ;
Gutierrez, Marco A. ;
Traina, Caetano, Jr. ;
Traina, Agma J. M. .
MEDICAL IMAGING 2022: COMPUTER-AIDED DIAGNOSIS, 2022, 12033
[39]   FEEDBACK ON A PUBLICLY DISTRIBUTED IMAGE DATABASE: THE MESSIDOR DATABASE [J].
Decenciere, Etienne ;
Zhang, Xiwei ;
Cazuguel, Guy ;
Lay, Bruno ;
Cochener, Beatrice ;
Trone, Caroline ;
Gain, Philippe ;
Ordonez-Varela, John-Richard ;
Massin, Pascale ;
Erginay, Ali ;
Charton, Beatrice ;
Klein, Jean-Claude .
IMAGE ANALYSIS & STEREOLOGY, 2014, 33 (03) :231-234
[40]   Multi-Modal Adversarial Example Detection with Transformer [J].
Ding, Chaoyue ;
Sun, Shiliang ;
Zhao, Jing .
2022 INTERNATIONAL JOINT CONFERENCE ON NEURAL NETWORKS (IJCNN), 2022,