Measuring The Robustness of AI Models Against Adversarial Attacks: Thyroid Ultrasound Images Case Study

Authors : Mustafa CEYHAN, Enis KARAARSLAN

Pages : 42-47

View : 84 | Download : 27

Publication Date : 2022-12-31

Article Type : Research Paper

Abstract :The healthcare industry is looking for ways on using artificial intelligence effectively. Decision support systems use AI insert ignore into journalissuearticles values(Artificial Intelligence); models that diagnose cancer from radiology images. These models in such implementations are not perfect, and the attackers can use techniques to make the models give wrong predictions. It is necessary to measure the robustness of these models after an adversarial attack. The studies in the literature focus on models trained with images obtained from different regions insert ignore into journalissuearticles values(lung x-ray and skin dermoscopy images); and shooting techniques. This study focuses on thyroid ultrasound images as a use case. We trained these images with VGG19, Xception, ResNet50V2, and EfficientNetB2 CNN models. The aim is to make these models make false predictions. We used FGSM, BIM, and PGD techniques to generate adversarial images. The attack resulted in misprediction with 99%. Future work will focus on making these models more robust with adversarial training.
Keywords : Adversarial Attack, CNN Models, Thyroid Ultrasound Images, Machine Learning, Deep Learning

ORIGINAL ARTICLE URL