Frequency Domain Adversarial Training for Robust Volumetric Medical SegmentationShow others and affiliations
2023 (English)In: MEDICAL IMAGE COMPUTING AND COMPUTER ASSISTED INTERVENTION, MICCAI 2023, PT II, SPRINGER INTERNATIONAL PUBLISHING AG , 2023, Vol. 14221, p. 457-467Conference paper, Published paper (Refereed)
Abstract [en]
It is imperative to ensure the robustness of deep learning models in critical applications such as, healthcare. While recent advances in deep learning have improved the performance of volumetric medical image segmentation models, these models cannot be deployed for real-world applications immediately due to their vulnerability to adversarial attacks. We present a 3D frequency domain adversarial attack for volumetric medical image segmentation models and demonstrate its advantages over conventional input or voxel domain attacks. Using our proposed attack, we introduce a novel frequency domain adversarial training approach for optimizing a robust model against voxel and frequency domain attacks. Moreover, we propose frequency consistency loss to regulate our frequency domain adversarial training that achieves a better tradeoff between model's performance on clean and adversarial samples. Code is available at https://github.com/asif-hanif/vafa.
Place, publisher, year, edition, pages
SPRINGER INTERNATIONAL PUBLISHING AG , 2023. Vol. 14221, p. 457-467
Series
Lecture Notes in Computer Science, ISSN 0302-9743
Keywords [en]
Adversarial attack; Adversarial training; Frequency domain attack; Volumetric medical segmentation
National Category
Computer graphics and computer vision
Identifiers
URN: urn:nbn:se:liu:diva-200108DOI: 10.1007/978-3-031-43895-0_43ISI: 001109624900043ISBN: 9783031438943 (print)ISBN: 9783031438950 (electronic)OAI: oai:DiVA.org:liu-200108DiVA, id: diva2:1827822
Conference
26th International Conference on Medical Image Computing and Computer-Assisted Intervention (MICCAI), Vancouver, CANADA, oct 08-12, 2023
2024-01-152024-01-152025-02-07