Visible to the public Jekyll: Attacking Medical Image Diagnostics using Deep Generative Models

TitleJekyll: Attacking Medical Image Diagnostics using Deep Generative Models
Publication TypeConference Paper
Year of Publication2020
AuthorsMangaokar, N., Pu, J., Bhattacharya, P., Reddy, C. K., Viswanath, B.
Conference Name2020 IEEE European Symposium on Security and Privacy (EuroS P)
Keywordsattacker-chosen disease condition, attacking medical image diagnostics, attacks, biomedical image, biomedical imagery, biomedical optical imaging, deep generative models, Deep Learning, deep learning tools, deep neural networks, defenses, diseases, DNN-based image translation attack, eye, Generative Models, healthcare domain, image segmentation, image watermarking, Jekyll, learning (artificial intelligence), machine learning, medical domain, medical image diagnostics, medical image processing, medical images, medical professionals, neural nets, neural style transfer, neural style transfer framework, patient healthcare, Predictive Metrics, pubcrawl, Resiliency, retinal fundus image modalities, Scalability, sensitive data
AbstractAdvances in deep neural networks (DNNs) have shown tremendous promise in the medical domain. However, the deep learning tools that are helping the domain, can also be used against it. Given the prevalence of fraud in the healthcare domain, it is important to consider the adversarial use of DNNs in manipulating sensitive data that is crucial to patient healthcare. In this work, we present the design and implementation of a DNN-based image translation attack on biomedical imagery. More specifically, we propose Jekyll, a neural style transfer framework that takes as input a biomedical image of a patient and translates it to a new image that indicates an attacker-chosen disease condition. The potential for fraudulent claims based on such generated `fake' medical images is significant, and we demonstrate successful attacks on both X-rays and retinal fundus image modalities. We show that these attacks manage to mislead both medical professionals and algorithmic detection schemes. Lastly, we also investigate defensive measures based on machine learning to detect images generated by Jekyll.
DOI10.1109/EuroSP48549.2020.00017
Citation Keymangaokar_jekyll_2020