BAPLe: Backdoor Attacks on Medical Foundational Models Using Prompt LearningShow others and affiliations
2024 (English)In: MEDICAL IMAGE COMPUTING AND COMPUTER ASSISTED INTERVENTION - MICCAI 2024, PT XII, SPRINGER INTERNATIONAL PUBLISHING AG , 2024, Vol. 15012, p. 443-453Conference paper, Published paper (Refereed)
Abstract [en]
Medical foundation models are gaining prominence in the medical community for their ability to derive general representations from extensive collections of medical image-text pairs. Recent research indicates that these models are susceptible to backdoor attacks, which allow them to classify clean images accurately but fail when specific triggers are introduced. However, traditional backdoor attacks necessitate a considerable amount of additional data to maliciously pre-train a model. This requirement is often impractical in medical imaging applications due to the usual scarcity of data. Inspired by the latest developments in learnable prompts, this work introduces a method to embed a backdoor into the medical foundation model during the prompt learning phase. By incorporating learnable prompts within the text encoder and introducing imperceptible learnable noise trigger to the input images, we exploit the full capabilities of the medical foundation models (MedFM). Our method requires only a minimal subset of data to adjust the text prompts for downstream tasks, enabling the creation of an effective backdoor attack. Through extensive experiments with four medical foundation models, each pre-trained on different modalities and evaluated across six downstream datasets, we demonstrate the efficacy of our approach. Code is available at https://github.com/asif-hanif/baple.
Place, publisher, year, edition, pages
SPRINGER INTERNATIONAL PUBLISHING AG , 2024. Vol. 15012, p. 443-453
Series
Lecture Notes in Computer Science, ISSN 0302-9743
Keywords [en]
Foundation models; Backdoor attack; Prompt tuning
National Category
Computer graphics and computer vision
Identifiers
URN: urn:nbn:se:liu:diva-210348DOI: 10.1007/978-3-031-72390-2_42ISI: 001344002100042ISBN: 9783031723896 (print)ISBN: 9783031723902 (electronic)OAI: oai:DiVA.org:liu-210348DiVA, id: diva2:1920003
Conference
27th International Conference on Medical Image Computing and Computer Assisted Intervention (MICCAI), Palmeraie Conf Ctr, Marrakesh, MOROCCO, oct 06-10, 2024
2024-12-102024-12-102025-02-07