ECGadv: Generating Adversarial Electrocardiogram to Misguide Arrhythmia Classification System

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Chen, Huangxun, Huang, Chenyu, Huang, Qianyi, Zhang, Qian, Wang, Wei
Natura: Preprint
Pubblicazione: 2019
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866910261605040128
author Chen, Huangxun
Huang, Chenyu
Huang, Qianyi
Zhang, Qian
Wang, Wei
author_facet Chen, Huangxun
Huang, Chenyu
Huang, Qianyi
Zhang, Qian
Wang, Wei
contents Deep neural networks (DNNs)-powered Electrocardiogram (ECG) diagnosis systems recently achieve promising progress to take over tedious examinations by cardiologists. However, their vulnerability to adversarial attacks still lack comprehensive investigation. The existing attacks in image domain could not be directly applicable due to the distinct properties of ECGs in visualization and dynamic properties. Thus, this paper takes a step to thoroughly explore adversarial attacks on the DNN-powered ECG diagnosis system. We analyze the properties of ECGs to design effective attacks schemes under two attacks models respectively. Our results demonstrate the blind spots of DNN-powered diagnosis systems under adversarial attacks, which calls attention to adequate countermeasures.
format Preprint
id arxiv_https___arxiv_org_abs_1901_03808
institution arXiv
publishDate 2019
record_format arxiv
spellingShingle ECGadv: Generating Adversarial Electrocardiogram to Misguide Arrhythmia Classification System
Chen, Huangxun
Huang, Chenyu
Huang, Qianyi
Zhang, Qian
Wang, Wei
Machine Learning
Signal Processing
Deep neural networks (DNNs)-powered Electrocardiogram (ECG) diagnosis systems recently achieve promising progress to take over tedious examinations by cardiologists. However, their vulnerability to adversarial attacks still lack comprehensive investigation. The existing attacks in image domain could not be directly applicable due to the distinct properties of ECGs in visualization and dynamic properties. Thus, this paper takes a step to thoroughly explore adversarial attacks on the DNN-powered ECG diagnosis system. We analyze the properties of ECGs to design effective attacks schemes under two attacks models respectively. Our results demonstrate the blind spots of DNN-powered diagnosis systems under adversarial attacks, which calls attention to adequate countermeasures.
title ECGadv: Generating Adversarial Electrocardiogram to Misguide Arrhythmia Classification System
topic Machine Learning
Signal Processing
url https://arxiv.org/abs/1901.03808