On the role of deep learning model complexity in adversarial robustness for medical images release_6jctdwquvvepbe6abge7rgemae

by David Rodriguez, Tapsya Nayak, Yidong Chen, Ram Krishnan, Yufei Huang

Published in BMC Medical Informatics and Decision Making by Springer Science and Business Media LLC.

2022   Volume 22, Issue S2, p160

Abstract

<jats:title>Abstract</jats:title><jats:sec> <jats:title>Background</jats:title> Deep learning (DL) models are highly vulnerable to adversarial attacks for medical image classification. An adversary could modify the input data in imperceptible ways such that a model could be tricked to predict, say, an image that actually exhibits malignant tumor to a prediction that it is benign. However, adversarial robustness of DL models for medical images is not adequately studied. DL in medicine is inundated with models of various complexity—particularly, very large models. In this work, we investigate the role of model complexity in adversarial settings. </jats:sec><jats:sec> <jats:title>Results</jats:title> Consider a set of DL models that exhibit similar performances for a given task. These models are trained in the usual manner but are not trained to defend against adversarial attacks. We demonstrate that, among those models, simpler models of reduced complexity show a greater level of robustness against adversarial attacks than larger models that often tend to be used in medical applications. On the other hand, we also show that once those models undergo adversarial training, the adversarial trained medical image DL models exhibit a greater degree of robustness than the standard trained models for all model complexities. </jats:sec><jats:sec> <jats:title>Conclusion</jats:title> The above result has a significant practical relevance. When medical practitioners lack the expertise or resources to defend against adversarial attacks, we recommend that they select the smallest of the models that exhibit adequate performance. Such a model would be naturally more robust to adversarial attacks than the larger models. </jats:sec>
In application/xml+jats format

Archived Files and Locations

application/pdf  3.3 MB
file_b2kdqfexizazjhtpuydl6yns2a
bmcmedinformdecismak.biomedcentral.com (publisher)
web.archive.org (webarchive)
Read Archived PDF
Preserved and Accessible
Type  article-journal
Stage   published
Date   2022-06-20
Language   en ?
Container Metadata
Open Access Publication
In DOAJ
In ISSN ROAD
In Keepers Registry
ISSN-L:  1472-6947
Work Entity
access all versions, variants, and formats of this works (eg, pre-prints)
Catalog Record
Revision: 68306db8-923c-4bbc-95c6-ab7c5ca6d558
API URL: JSON