Defense Against Adversarial Attacks Based on Stochastic Descent Sign Activation Networks on Medical Images

Document Type

Article

Publication Date

3-15-2022

Abstract

Machine learning techniques in medical imaging systems are accurate, but minor perturbations in the data known as adversarial attacks can fool them. These attacks make the systems vulnerable to fraud and deception, and thus a significant challenge has been posed in practice. We present the gradient-free trained sign activation networks to detect and deter adversarial attacks on medical imaging AI systems. Experimental results show that a higher distortion value is required to attack our proposed model than the other existing state-of-the-art models on MRI, Chest X-ray, and Histopathology image datasets, where our model outperforms the best and is even twice superior. The average accuracy of our model in classifying the adversarial examples is 88.89%, whereas those for MLP and LeNet are 81.48%, and that of ResNet18 is 38.89%. It is concluded that the sign network is a solution to defend adversarial attacks due to high distortion and high accuracy on transferability. Our work is a significant step towards safe and secure medical AI systems.

Identifier

85124201628 (Scopus)

Publication Title

International Journal of Pattern Recognition and Artificial Intelligence

External Full Text Location

https://doi.org/10.1142/S0218001422540052

ISSN

02180014

Issue

3

Volume

36

This document is currently not available here.

Share

COinS