Adversarially-Aware Architecture Design for Robust Medical AI Systems

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Gerhart, Alyssa, Iyangar, Balaji
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909871512748032
author Gerhart, Alyssa
Iyangar, Balaji
author_facet Gerhart, Alyssa
Iyangar, Balaji
contents Adversarial attacks pose a severe risk to AI systems used in healthcare, capable of misleading models into dangerous misclassifications that can delay treatments or cause misdiagnoses. These attacks, often imperceptible to human perception, threaten patient safety, particularly in underserved populations. Our study explores these vulnerabilities through empirical experimentation on a dermatological dataset, where adversarial methods significantly reduce classification accuracy. Through detailed threat modeling, experimental benchmarking, and model evaluation, we demonstrate both the severity of the threat and the partial success of defenses like adversarial training and distillation. Our results show that while defenses reduce attack success rates, they must be balanced against model performance on clean data. We conclude with a call for integrated technical, ethical, and policy-based approaches to build more resilient, equitable AI in healthcare.
format Preprint
id arxiv_https___arxiv_org_abs_2510_23622
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Adversarially-Aware Architecture Design for Robust Medical AI Systems
Gerhart, Alyssa
Iyangar, Balaji
Machine Learning
Cryptography and Security
Adversarial attacks pose a severe risk to AI systems used in healthcare, capable of misleading models into dangerous misclassifications that can delay treatments or cause misdiagnoses. These attacks, often imperceptible to human perception, threaten patient safety, particularly in underserved populations. Our study explores these vulnerabilities through empirical experimentation on a dermatological dataset, where adversarial methods significantly reduce classification accuracy. Through detailed threat modeling, experimental benchmarking, and model evaluation, we demonstrate both the severity of the threat and the partial success of defenses like adversarial training and distillation. Our results show that while defenses reduce attack success rates, they must be balanced against model performance on clean data. We conclude with a call for integrated technical, ethical, and policy-based approaches to build more resilient, equitable AI in healthcare.
title Adversarially-Aware Architecture Design for Robust Medical AI Systems
topic Machine Learning
Cryptography and Security
url https://arxiv.org/abs/2510.23622