Defense Against Adversarial Attacks Based on Stochastic Descent Sign Activation Networks on Medical Images

Research output: Contribution to journalArticlepeer-review

Abstract

Machine learning techniques in medical imaging systems are accurate, but minor perturbations in the data known as adversarial attacks can fool them. These attacks make the systems vulnerable to fraud and deception, and thus a significant challenge has been posed in practice. We present the gradient-free trained sign activation networks to detect and deter adversarial attacks on medical imaging AI systems. Experimental results show that a higher distortion value is required to attack our proposed model than the other existing state-of-the-art models on MRI, Chest X-ray, and Histopathology image datasets, where our model outperforms the best and is even twice superior. The average accuracy of our model in classifying the adversarial examples is 88.89%, whereas those for MLP and LeNet are 81.48%, and that of ResNet18 is 38.89%. It is concluded that the sign network is a solution to defend adversarial attacks due to high distortion and high accuracy on transferability. Our work is a significant step towards safe and secure medical AI systems.

Original languageEnglish (US)
Article number2254005
JournalInternational Journal of Pattern Recognition and Artificial Intelligence
Volume36
Issue number3
DOIs
StatePublished - Mar 15 2022
Externally publishedYes

All Science Journal Classification (ASJC) codes

  • Software
  • Computer Vision and Pattern Recognition
  • Artificial Intelligence

Keywords

  • Robust machine learning
  • adversarial attack
  • medical AI imaging system
  • medical image classification

Fingerprint

Dive into the research topics of 'Defense Against Adversarial Attacks Based on Stochastic Descent Sign Activation Networks on Medical Images'. Together they form a unique fingerprint.

Cite this