基于区域选择的医学图像可逆对抗样本
CSTR:
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

TP 391

基金项目:

国家自然科学基金资助项目(61902239);上海市浦江人才计划(22PJD031)


Reversible adversarial examples for medical images based on region selection
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    针对现有可逆对抗样本生成方法在医学图像中适用性较差的问题,提出一种基于区域选择的医学图像可逆对抗样本生成方法。具体地,通过利用生成对抗网络生成精确而微小的对抗扰动,并结合区域分割模块,选择性地将扰动限制到对诊断结果没有影响的区域,确保医学图像能拥有高攻击性能的同时仍能保持其临床可用性。此外,为了保证原始图像能够无损地得到恢复,利用可逆信息隐藏算法将添加的对抗扰动可逆地嵌入到图像之中,以保证授权机构能够合法和安全地使用。为了防止可逆嵌入的溢出问题,在进行嵌入前对这些扰动采用无损压缩技术进行压缩,以降低对抗扰动的大小,减轻因为嵌入带来的图像攻击能力和视觉质量的下降。实验结果表明,本文方法生成的可逆对抗样本平均攻击成功率、峰值信噪比和结构相似性分别为89.27%、29.54 dB和0.7922,比几种经典的可逆对抗样本生成方法的性能更加优秀。

    Abstract:

    To address the poor applicability of existing reversible adversarial example generation methods in medical imaging, a region selection-based reversible adversarial example generation method for medical images was proposed. Specifically, a generative adversarial network was used to generate precise and subtle adversarial perturbations. Combined with a region segmentation module, these perturbations were selectively constrained to regions that have no impact on diagnostic results. This ensured that the medical images retain high attack performance while maintaining clinical usability. Furthermore, to enable lossless recovery of the original images, a reversible data hiding algorithm was employed to embed the adversarial perturbations in a reversible manner, allowing authorized institutions to legally and securely recover the original data. To prevent overflow issues during reversible embedding, lossless compression was applied to the perturbations before embedding, reducing their size and minimizing the degradation of both attack effectiveness and visual quality caused by the embedding process. Experimental results demonstrate that the proposed method achieves an average attack success rate of 89.27%, a peak signal-to-noise ratio of 29.54 dB, and a structural similarity index of 0.7922, outperforming several classical reversible adversarial example generation methods in overall performance.

    参考文献
    相似文献
    引证文献
引用本文

张永东,黄霖,周亮,陈立范,王宏杰,孔平.基于区域选择的医学图像可逆对抗样本[J].上海理工大学学报,2025,47(5):590-602.

复制
分享
相关视频

文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2024-09-23
  • 最后修改日期:
  • 录用日期:
  • 在线发布日期: 2025-11-21
  • 出版日期:
文章二维码