Enhanced CNN Security based on Adversarial FGSM Attack Learning: Medical Image Classification

Lazhar Khriji*, Seifeddine Messaoud, Soulef Bouaafia, Ahmed Chiheb Ammari, Mohsen Machhout

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Convolutional Neural Networks (CNNs) have grown in popularity for clinical image processing applications like as Covid and cancer detection. A new study, however, shows that hostile attacks with modest, unnoticeable disruptions can damage deep healthcare learning systems. This creates safety issues about using these technologies in healthcare situations. In this study, we will look at the approaches used to fight adversarial attacks on medical imaging. Next, we intend to investigate the resilience of pre-trained CNN architectures, as well as LeNet5 and MobileNetV1 models against Fast Gradient Sign Method (FGSM) attacks in a medical healthcare application-based chest X-ray dataset. We discover that pre-trained CNN models are much more sensitive to antagonistic assaults than other models, due to key feature discrepancies between them and regular models. Finally, we propose to improve the CNN' models security by investigating adversarial training. According to the numerical results, models with lower computational complexity and restricted layers are much more safe against malicious attacks than bigger models which are commonly utilized in medical healthcare systems.

Original languageEnglish
Title of host publication2023 20th International Multi-Conference on Systems, Signals and Devices, SSD 2023
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages360-365
Number of pages6
ISBN (Electronic)9798350332568
DOIs
Publication statusPublished - 2023
Event20th International Multi-Conference on Systems, Signals and Devices, SSD 2023 - Mahdia, Tunisia
Duration: Feb 20 2023Feb 23 2023

Publication series

Name2023 20th International Multi-Conference on Systems, Signals and Devices, SSD 2023

Conference

Conference20th International Multi-Conference on Systems, Signals and Devices, SSD 2023
Country/TerritoryTunisia
CityMahdia
Period2/20/232/23/23

Keywords

  • Adversarial Attacks
  • CNNs
  • Medical Data
  • Security and Privacy

ASJC Scopus subject areas

  • Artificial Intelligence
  • Computer Science Applications
  • Computer Networks and Communications
  • Information Systems
  • Signal Processing
  • Health Informatics
  • Instrumentation

Cite this