Hidden in Plain Sight: Undetectable Adversarial Bias Attacks on Vulnerable Patient Populations

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Kulkarni, Pranav, Chan, Andrew, Navarathna, Nithya, Chan, Skylar, Yi, Paul H., Parekh, Vishwa S.
Format: Preprint
Veröffentlicht: 2024
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866909162888232960
author Kulkarni, Pranav
Chan, Andrew
Navarathna, Nithya
Chan, Skylar
Yi, Paul H.
Parekh, Vishwa S.
author_facet Kulkarni, Pranav
Chan, Andrew
Navarathna, Nithya
Chan, Skylar
Yi, Paul H.
Parekh, Vishwa S.
contents The proliferation of artificial intelligence (AI) in radiology has shed light on the risk of deep learning (DL) models exacerbating clinical biases towards vulnerable patient populations. While prior literature has focused on quantifying biases exhibited by trained DL models, demographically targeted adversarial bias attacks on DL models and its implication in the clinical environment remains an underexplored field of research in medical imaging. In this work, we demonstrate that demographically targeted label poisoning attacks can introduce undetectable underdiagnosis bias in DL models. Our results across multiple performance metrics and demographic groups like sex, age, and their intersectional subgroups show that adversarial bias attacks demonstrate high-selectivity for bias in the targeted group by degrading group model performance without impacting overall model performance. Furthermore, our results indicate that adversarial bias attacks result in biased DL models that propagate prediction bias even when evaluated with external datasets.
format Preprint
id arxiv_https___arxiv_org_abs_2402_05713
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Hidden in Plain Sight: Undetectable Adversarial Bias Attacks on Vulnerable Patient Populations
Kulkarni, Pranav
Chan, Andrew
Navarathna, Nithya
Chan, Skylar
Yi, Paul H.
Parekh, Vishwa S.
Machine Learning
Artificial Intelligence
Computer Vision and Pattern Recognition
The proliferation of artificial intelligence (AI) in radiology has shed light on the risk of deep learning (DL) models exacerbating clinical biases towards vulnerable patient populations. While prior literature has focused on quantifying biases exhibited by trained DL models, demographically targeted adversarial bias attacks on DL models and its implication in the clinical environment remains an underexplored field of research in medical imaging. In this work, we demonstrate that demographically targeted label poisoning attacks can introduce undetectable underdiagnosis bias in DL models. Our results across multiple performance metrics and demographic groups like sex, age, and their intersectional subgroups show that adversarial bias attacks demonstrate high-selectivity for bias in the targeted group by degrading group model performance without impacting overall model performance. Furthermore, our results indicate that adversarial bias attacks result in biased DL models that propagate prediction bias even when evaluated with external datasets.
title Hidden in Plain Sight: Undetectable Adversarial Bias Attacks on Vulnerable Patient Populations
topic Machine Learning
Artificial Intelligence
Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2402.05713