Mobile applications for skin cancer detection are vulnerable to physical camera-based adversarial attacks

Mobile applications for skin cancer detection are vulnerable to physical camera-based adversarial attacks

  • Siegel, R.L., Giaquinto, A.N., & Jemal, A. Cancer statistics, 2024. CA: a cancer journal for clinicians. 74(1):12–49 (2024).

  • Diepgen, T. L. & Mahler, V. The epidemiology of skin cancer. British Journal of Dermatology. 146(s61), 1–6 (2002).

    Article 
    PubMed 

    Google Scholar 

  • Nikolaou, V. & Stratigos, A. Emerging trends in the epidemiology of melanoma. British journal of dermatology. 170(1), 11–19 (2014).

    Article 
    CAS 
    PubMed 

    Google Scholar 

  • Resneck, J. Jr. & Kimball, A. B. The dermatology workforce shortage. Journal of the American Academy of Dermatology. 50(1), 50–54 (2004).

    Article 
    PubMed 

    Google Scholar 

  • Ehrlich, A., Kostecki, J. & Olkaba, H. Trends in dermatology practices and the implications for the workforce. Journal of the American Academy of Dermatology. 77(4), 746–752 (2017).

    Article 
    PubMed 

    Google Scholar 

  • Porter, M. L. & Kimball, A. B. Predictions, surprises, and the future of the dermatology workforce. JAMA dermatology. 154(11), 1253–1255 (2018).

    Article 
    PubMed 

    Google Scholar 

  • Kassianos, A. P., Emery, J., Murchie, P. & Walter, F. M. Smartphone applications for melanoma detection by community, patient and generalist clinician users: a review. British Journal of Dermatology. 172(6), 1507–1518 (2015).

    Article 
    CAS 
    PubMed 

    Google Scholar 

  • Rat, C. et al. Use of smartphones for early detection of melanoma: systematic review. Journal of medical Internet research. 20(4), e135 (2018).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Chan, S. et al. Machine learning in dermatology: current applications, opportunities, and limitations. Dermatology and therapy. 10, 365–386 (2020).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Freeman, K., Dinnes, J., Chuchu, N., Takwoingi, Y., Bayliss, S.E., Matin, R.N., et al. Algorithm based smartphone apps to assess risk of skin cancer in adults: systematic review of diagnostic accuracy studies. bmj. 368. (2020)

  • Udrea, A. et al. Accuracy of a smartphone application for triage of skin lesions based on machine learning algorithms. Journal of the European Academy of Dermatology and Venereology. 34(3), 648–655 (2020).

    Article 
    CAS 
    PubMed 

    Google Scholar 

  • Wolf, J. A. et al. Diagnostic inaccuracy of smartphone applications for melanoma detection. JAMA dermatology. 149(4), 422–426 (2013).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Ngoo, A. et al. Efficacy of smartphone applications in high-risk pigmented lesions. Australasian Journal of Dermatology. 59(3), e175–e182 (2018).

    Article 
    PubMed 

    Google Scholar 

  • Deeks, J., Dinnes, J. & Williams, H. Sensitivity and specificity of SkinVision are likely to have been overestimated. J Eur Acad Dermatol Venereol. 34(10), e582-3 (2020).

    Article 
    CAS 
    PubMed 

    Google Scholar 

  • Shen, D., Wu, G. & Suk, H. I. Deep learning in medical image analysis. Annual review of biomedical engineering. 19(1), 221–248 (2017).

    Article 
    CAS 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Brinker, T. J. et al. Skin cancer classification using convolutional neural networks: systematic review. Journal of medical Internet research. 20(10), e11936 (2018).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Goyal, M., Knackstedt, T., Yan, S. & Hassanpour, S. Artificial intelligence-based image classification methods for diagnosis of skin cancer: Challenges and opportunities. Computers in biology and medicine. 127, 104065 (2020).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Dascalu, A. & David, E. Skin cancer detection by deep learning and sound analysis algorithms: A prospective clinical study of an elementary dermoscope. EBioMedicine. 43, 107–113 (2019).

    Article 
    CAS 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Takiddin, A., Schneider, J., Yang, Y., Abd-Alrazaq, A. & Househ, M. Artificial intelligence for skin cancer detection: scoping review. Journal of medical Internet research. 23(11), e22934 (2021).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Sokolov, K. & Shpudeiko, V. Dynamics of the neural network accuracy in the context of modernization of the algorithms of skin pathology recognition. Indian Journal of Dermatology. 67(3), 312 (2022).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Esteva, A., Kuprel, B., Novoa, R.A., Ko, J., Swetter, S.M., Blau, H.M., et al. Dermatologist-level classification of skin cancer with deep neural networks. nature. 542(7639):115–118. (2017)

  • Liu, X. et al. A comparison of deep learning performance against health-care professionals in detecting diseases from medical imaging: a systematic review and meta-analysis. The lancet digital health. 1(6), e271–e297 (2019).

    Article 
    PubMed 

    Google Scholar 

  • Kong, F. W., Horsham, C., Ngoo, A., Soyer, H. P. & Janda, M. Review of smartphone mobile applications for skin cancer detection: what are the changes in availability, functionality, and costs to users over time?. International Journal of Dermatology. 60(3), 289–308 (2021).

    Article 
    PubMed 

    Google Scholar 

  • Goceri, E. Diagnosis of skin diseases in the era of deep learning and mobile technology. Computers in Biology and Medicine. 134, 104458 (2021).

    Article 
    PubMed 

    Google Scholar 

  • Kränke, T. et al. New AI-algorithms on smartphones to detect skin cancer in a clinical setting-A validation study. Plos one. 18(2), e0280670 (2023).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Smak Gregoor, A. M. et al. An artificial intelligence based app for skin cancer detection evaluated in a population based setting. NPJ digital medicine. 6(1), 90 (2023).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Yuan, X., He, P., Zhu, Q. & Li, X. Adversarial examples: Attacks and defenses for deep learning. IEEE transactions on neural networks and learning systems. 30(9), 2805–2824 (2019).

    Article 
    MathSciNet 
    PubMed 

    Google Scholar 

  • Chakraborty, A., Alam, M., Dey, V., Chattopadhyay, A. & Mukhopadhyay, D. A survey on adversarial attacks and defences. CAAI Transactions on Intelligence Technology. 6(1), 25–45 (2021).

    Article 

    Google Scholar 

  • Akhtar, N., Mian, A., Kardan, N. & Shah, M. Advances in adversarial attacks and defenses in computer vision: A survey. IEEE Access. 9, 155161–155196 (2021).

    Article 

    Google Scholar 

  • Kaviani, S., Han, K. J. & Sohn, I. Adversarial attacks and defenses on AI in medical imaging informatics: A survey. Expert Systems with Applications. 198, 116815 (2022).

    Article 

    Google Scholar 

  • Sorin, V., Soffer, S., Glicksberg, B.S., Barash, Y., Konen, E., & Klang, E. Adversarial attacks in radiology–A systematic review. European Journal of Radiology. p. 111085 (2023).

  • Finlayson, S. G. et al. Adversarial attacks on medical machine learning. Science. 363(6433), 1287–1289 (2019).

    Article 
    ADS 
    CAS 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Hirano, H., Minagi, A. & Takemoto, K. Universal adversarial attacks on deep neural networks for medical image classification. BMC medical imaging. 21, 1–13 (2021).

    Article 

    Google Scholar 

  • Asgari Taghanaki, S., Das, A., & Hamarneh, G. Vulnerability analysis of chest x-ray image classification against adversarial attacks. In: Understanding and Interpreting Machine Learning in Medical Image Computing Applications: First International Workshops, MLCN 2018, DLF 2018, and iMIMIC 2018, Held in Conjunction with MICCAI 2018, Granada, Spain, September 16-20, Proceedings 1. Springer; 2018. p. 87–94. (2018).

  • Hirano, H., Koga, K. & Takemoto, K. Vulnerability of deep neural networks for detecting COVID-19 cases from chest X-ray images to universal adversarial attacks. Plos one. 15(12), e0243963 (2020).

    Article 
    CAS 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Cheng, G. & Ji, H. Adversarial perturbation on MRI modalities in brain tumor segmentation. IEEE Access. 8, 206009–206015 (2020).

    Article 

    Google Scholar 

  • Kaissis, G. A., Makowski, M. R., Rückert, D. & Braren, R. F. Secure, privacy-preserving and federated machine learning in medical imaging. Nature Machine Intelligence. 2(6), 305–311 (2020).

    Article 

    Google Scholar 

  • Kurakin, A., Goodfellow, I.J., spsampsps Bengio, S. Adversarial examples in the physical world. In: Artificial intelligence safety and security. Chapman and Hall/CRC; p. 99–112 (2018).

  • Wei, H., Tang, H., Jia, X., Wang, Z., Yu, H., Li, Z., et al. Physical adversarial attack meets computer vision: A decade survey. IEEE Transactions on Pattern Analysis and Machine Intelligence. (2024)

  • Ren, H., Huang, T. & Yan, H. Adversarial examples: attacks and defenses in the physical world. International Journal of Machine Learning and Cybernetics. 12(11), 3325–3336 (2021).

    Article 

    Google Scholar 

  • Eykholt, K., & Evtimov, I. Fernandes E, Li B, Rahmati A, Xiao C, et al. Robust physical-world attacks on deep learning visual classification. In: Proceedings of the IEEE conference on computer vision and pattern recognition; p. 1625–1634 (2018).

  • Thys, S., Van Ranst, W., & Goedemé, T. Fooling automated surveillance cameras: adversarial patches to attack person detection. In: Proceedings of the IEEE/CVF conference on computer vision and pattern recognition workshops; p. 0–0 (2019).

  • Gnanasambandam, A., Sherman, A.M., & Chan, S.H. Optical adversarial attack. In: Proceedings of the IEEE/CVF International Conference on Computer Vision; p. 92–101 (2021).

  • Wang, D., Yao, W., Jiang, T., Li, C., & Chen, X. Rfla: A stealthy reflected light adversarial attack in the physical world. In: Proceedings of the IEEE/CVF International Conference on Computer Vision; p. 4455–4465 (2023).

  • Li, J., Schmidt, F., & Kolter, Z. Adversarial camera stickers: A physical camera-based attack on deep learning systems. In: International conference on machine learning. PMLR; p. 3896–3904 (2019).

  • Papernot, N., McDaniel, P., Goodfellow, I., Jha, S., Celik, Z.B., & Swami, A. Practical black-box attacks against machine learning. In: Proceedings of the 2017 ACM on Asia conference on computer and communications security; p. 506–519 (2017).

  • Cheng, S., Dong, Y., Pang, T., Su, H., & Zhu, J. Improving black-box adversarial attacks with a transfer-based prior. Advances in neural information processing systems. 32 (2019).

  • Demontis, A., Melis, M., Pintor, M., Jagielski, M., Biggio B, Oprea, A, et al. Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks. In: 28th USENIX security symposium (USENIX security 19); p. 321–338 (2019).

  • Bortsova, G. et al. Adversarial attack vulnerability of medical image analysis systems: Unexplored factors. Medical Image Analysis. 73, 102141 (2021).

    Article 
    PubMed 

    Google Scholar 

  • Ma, X. et al. Understanding adversarial attacks on deep learning based medical image analysis systems. Pattern Recognition. 110, 107332 (2021).

    Article 

    Google Scholar 

  • Kousis, I., Perikos, I., Hatzilygeroudis, I. & Virvou, M. Deep learning methods for accurate skin cancer recognition and mobile application. Electronics. 11(9), 1294 (2022).

    Article 

    Google Scholar 

  • Turion Development. Blemish Types, Skin Cancer ID; . Available from: https://play.google.com/store/apps/details?id=com.FotoCheckSkin.(2024)

  • Tschandl, P., Rosendahl, C. & Kittler, H. The HAM10000 dataset, a large collection of multi-source dermatoscopic images of common pigmented skin lesions. Scientific data. 5(1), 1–9 (2018).

    Article 

    Google Scholar 

  • Codella, N., Rotemberg, V., Tschandl, P., Celebi, M.E., Dusza, S., Gutman, D., et al. Skin lesion analysis toward melanoma detection 2018: A challenge hosted by the international skin imaging collaboration (isic). arXiv preprint arXiv:1902.03368. (2019).

  • Minagi, A., Hirano, H. & Takemoto, K. Natural images allow universal adversarial attacks on medical image classification using deep neural networks with transfer learning. Journal of Imaging. 8(2), 38 (2022).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Koga, K. & Takemoto, K. Simple black-box universal adversarial attacks on deep neural networks for medical image classification. Algorithms. 15(5), 144 (2022).

    Article 

    Google Scholar 

  • Howard, A.G. Mobilenets: Efficient convolutional neural networks for mobile vision applications. arXiv preprint arXiv:1704.04861. (2017).

  • He, K., Zhang, X., Ren, S., & Sun, J. Deep residual learning for image recognition. In: Proceedings of the IEEE conference on computer vision and pattern recognition; (2016). p. 770–778.

  • Simonyan, K. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556. (2014)

  • Tan, M., & Le, Q. Efficientnet: Rethinking model scaling for convolutional neural networks. In: International conference on machine learning. PMLR; p. 6105–6114 (2019).

  • Huang, G., Liu, Z., Van Der Maaten, L., & Weinberger, K.Q. Densely connected convolutional networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition; p. 4700–4708 (2017).

  • Dosovitskiy, A. An image is worth 16×16 words: Transformers for image recognition at scale. arXiv preprint arXiv:2010.11929. (2020).

  • Cubuk, E.D., Zoph, B., Shlens, J., & Le, Q.V. Randaugment: Practical automated data augmentation with a reduced search space. In: Proceedings of the IEEE/CVF conference on computer vision and pattern recognition workshops; p. 702–703 (2020).

  • Kingma, D.P. Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980. (2014).

  • Ming. Imbalanced Dataset Sampler; (2022). Available from: https://github.com/ufoym/imbalanced-dataset-sampler.

  • Moosavi-Dezfooli, S.M., Fawzi, A., Fawzi, O., & Frossard, P. Universal adversarial perturbations. In: Proceedings of the IEEE conference on computer vision and pattern recognition; (2017). p. 1765–1773.

  • Poursaeed, O., Katsman, I., Gao, B., & Belongie, S. Generative adversarial perturbations. In: Proceedings of the IEEE conference on computer vision and pattern recognition; p. 4422–4431 (2018).

  • Richardson, S., Lawrence, K., Schoenthaler, A. M. & Mann, D. A framework for digital health equity. NPJ digital medicine. 5(1), 119 (2022).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Abernethy, A., Adams, L., Barrett, M., Bechtel, C., Brennan, P., Butte, A., et al. The promise of digital health: then, now, and the future. NAM perspectives. 2022;(2022)

  • Muoka, G. W. et al. A comprehensive review and analysis of deep learning-based medical image adversarial attack and defense. Mathematics. 11(20), 4272 (2023).

    Article 

    Google Scholar 

  • Madry, A., Makelov, A., Schmidt, L., Tsipras, D., & Vladu, A. Towards Deep Learning Models Resistant to Adversarial Attacks. In: International Conference on Learning Representations; (2018).Available from: https://openreview.net/forum?id=rJzIBfZAb.

  • Ma, L. & Liang, L. Increasing-margin adversarial (IMA) training to improve adversarial robustness of neural networks. Computer methods and programs in biomedicine. 240, 107687 (2023).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Hu, L., Guo, X., Zhou, D., Wang, Z., Dai, L., Li, L., et al. Development and validation of a deep learning model to reduce the interference of rectal artifacts in MRI-based prostate cancer diagnosis. Radiology: Artificial Intelligence. 6(2):e230362 (2024).

  • Samangouei, P., Kabkab, M., & Chellappa, R. Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models. In: International Conference on Learning Representations; (2018).Available from: https://openreview.net/forum?id=BkJ3ibb0-.

  • Ashraf, S. N., Siddiqi, R. & Farooq, H. Auto encoder-based defense mechanism against popular adversarial attacks in deep learning. PloS one. 19(10), e0307363 (2024).

    Article 
    CAS 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Tran, K., Ly, L., & Luong, N.H. Adversarial Robustness of Medical Image Classifiers via Denoised Smoothing. In: International Symposium on Information and Communication Technology. Springer; (2024). p. 42–56.

  • Tsipras, D., Santurkar, S., Engstrom, L., Turner, A., & Madry, A. Robustness May Be at Odds with Accuracy. In: International Conference on Learning Representations; (2019).Available from: https://openreview.net/forum?id=SyxAb30cY7.

  • Guo, C, Frank, J.S., & Weinberger, K.Q. Low Frequency Adversarial Perturbation. In: Adams RP, Gogate V, editors. Proceedings of The 35th Uncertainty in Artificial Intelligence Conference. vol. 115 of Proceedings of Machine Learning Research. PMLR; (2020). p. 1127–1137. Available from: https://proceedings.mlr.press/v115/guo20a.html.

  • Carlini, N., & Wagner, D. Adversarial examples are not easily detected: Bypassing ten detection methods. In: Proceedings of the 10th ACM workshop on artificial intelligence and security; (2017). p. 3–14.

  • Croce, F., & Hein, M. Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: International conference on machine learning. PMLR; (2020). p. 2206–2216.

  • Chen, F. et al. Frequency constraint-based adversarial attack on deep neural networks for medical image classification. Computers in biology and medicine. 164, 107248 (2023).

    Article 
    PubMed 

    Google Scholar 

  • Aljedaani, B. et al. Challenges with developing secure mobile health applications: Systematic review. JMIR mHealth and uHealth. 9(6), e15654 (2021).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Bulusu, S., Kailkhura, B., Li, B., Varshney, P. K. & Song, D. Anomalous example detection in deep learning: A survey. IEEE Access. 8, 132330–132347 (2020).

    Article 

    Google Scholar 

  • Tramèr, F., Kurakin, A., Papernot, N., Goodfellow, I., Boneh, D., & McDaniel, P. Ensemble Adversarial Training: Attacks and Defenses. In: International Conference on Learning Representations; (2018).Available from: https://openreview.net/forum?id=rkZvSe-RZ.

  • Natha, S. et al. Automated brain tumor identification in biomedical radiology images: A multi-model ensemble deep learning approach. Applied Sciences. 14(5), 2210 (2024).

    Article 
    CAS 

    Google Scholar 

  • Aliyu, I., Van Engelenburg, S., Mu’Azu, M. B., Kim, J. & Lim, C. G. Statistical detection of adversarial examples in blockchain-based federated forest in-vehicle network intrusion detection systems. IEEE Access. 10, 109366–109384 (2022).

    Article 

    Google Scholar 

  • Zhang, J. et al. IEEE 29th Asian test symposium (ATS). IEEE 2020, 1–6 (2020).

  • Larrazabal, A. J., Nieto, N., Peterson, V., Milone, D. H. & Ferrante, E. Gender imbalance in medical imaging datasets produces biased classifiers for computer-aided diagnosis. Proceedings of the National Academy of Sciences. 117(23), 12592–12594 (2020).

    Article 
    ADS 
    CAS 

    Google Scholar 

  • Vokinger, K. N., Feuerriegel, S. & Kesselheim, A. S. Mitigating bias in machine learning for medicine. Communications medicine. 1(1), 25 (2021).

    Article 
    PubMed 
    PubMed Central 

    Google Scholar 

  • Glocker, B., Jones, C., Roschewitz, M., & Winzeck, S. Risk of bias in chest radiography deep learning foundation models. Radiology: Artificial Intelligence. 5(6):e230060 (2023).

  • Qayyum, A., Qadir, J., Bilal, M. & Al-Fuqaha, A. Secure and robust machine learning for healthcare: A survey. IEEE Reviews in Biomedical Engineering. 14, 156–180 (2020).

    Article 

    Google Scholar 

  • link

    Leave a Reply

    Your email address will not be published. Required fields are marked *