Evidence map›Paper›PMID 34200216›Full record

ArticleSensors (Basel, Switzerland)2021

Adversarial Attack and Defence through Adversarial Training and Feature Fusion for Diabetic Retinopathy Recognition.

Sheeba Lal, Saeed Ur Rehman, Jamal Hussain Shah, Talha Meraj, Hafiz Tayyab Rauf, Robertas Damaševičius, Mazin Abed Mohammed, Karrar Hameed Abdulkareem

Abstract read
In one paragraph

Article in Sensors (Basel, Switzerland), 2021. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 15 papers.

0numbers the graph read from it
0cells of the map it votes in
15citing papers in PubMed
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

15 citing papers in PubMed.

  1. Article
  2. Article
  3. Article
  4. Article
  5. Review
  6. Article
  7. Article
  8. Article
  9. Article
  10. Article
  11. Article
  12. Article
  13. Article
  14. Article
  15. Article
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

8 authors.

Sheeba LalDepartment of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt 47040, Pakistan.
Saeed Ur RehmanDepartment of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt 47040, Pakistan.
Jamal Hussain ShahDepartment of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt 47040, Pakistan.
Talha MerajDepartment of Computer Science, COMSATS University Islamabad, Wah Campus, Wah Cantt 47040, Pakistan.ORCID 0000-0002-5743-3697
Hafiz Tayyab RaufDepartment of Computer Science, Faculty of Engineering & Informatics, University of Bradford, Bradford BD7 1DP, UK.ORCID 0000-0002-1515-3187
Robertas DamaševičiusFaculty of Applied Mathematics, Silesian University of Technology, 44-100 Gliwice, Poland.ORCID 0000-0001-9990-1084
Mazin Abed MohammedCollege of Computer Science and Information Technology, University of Anbar, Anbar 31001, Iraq.ORCID 0000-0001-9030-8102
Karrar Hameed AbdulkareemCollege of Agriculture, Al-Muthanna University, Samawah 66001, Iraq.ORCID 0000-0001-7302-2049

Funding

No grant is acknowledged in the PubMed record.

6 · The paper itself

Abstract

Due to the rapid growth in artificial intelligence (AI) and deep learning (DL) approaches, the security and robustness of the deployed algorithms need to be guaranteed. The security susceptibility of the DL algorithms to adversarial examples has been widely acknowledged. The artificially created examples will lead to different instances negatively identified by the DL models that are humanly considered benign. Practical application in actual physical scenarios with adversarial threats shows their features. Thus, adversarial attacks and defense, including machine learning and its reliability, have drawn growing interest and, in recent years, has been a hot topic of research. We introduce a framework that provides a defensive model against the adversarial speckle-noise attack, the adversarial training, and a feature fusion strategy, which preserves the classification with correct labelling. We evaluate and analyze the adversarial attacks and defenses on the retinal fundus images for the Diabetic Retinopathy recognition problem, which is considered a state-of-the-art endeavor. Results obtained on the retinal fundus images, which are prone to adversarial attacks, are 99% accurate and prove that the proposed defensive model is robust.

Indexed as

Diabetes MellitusDiabetic RetinopathyAlgorithmsArtificial IntelligenceHumansNeural Networks, ComputerReproducibility of Resultsadversarial attackadversarial trainingdeep learningdiabetic retinopathyfeature fusionspeckle-noise attack

Identifiers

PMID34200216
PMCPMC8201392

What OpenQuestion holds

Textmetadata
LicenceCC BY
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.