Saliency Guided Adversarial Training for Learning Generalizable Features with Applications to Medical Imaging Classification System
Not on the map. Why?
Abstract (arXiv)
This work tackles a central machine learning problem of performance degradation on out-of-distribution (OOD) test sets. The problem is particularly salient in medical imaging based diagnosis system that appears to be accurate but fails when tested in new hospitals/datasets. Recent studies indicate the system might learn shortcut and non-relevant features instead of generalizable features, so-called good features. We hypothesize that adversarial training can eliminate shortcut features whereas saliency guided training can filter out non-relevant features; both are nuisance features accounting for the performance degradation on OOD test sets. With that, we formulate a novel model training scheme for the deep neural network to learn good features for classification and/or detection tasks ensuring a consistent generalization performance on OOD test sets. The experimental results qualitatively and quantitatively demonstrate the superior performance of our method using the benchmark CXR image data sets on classification tasks.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 47 of its 55 references that are in the map. First posted on arXiv 9 Sep 2022.
Builds on
47 of 55 references.
References · 47
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017Axiomatic Attribution for Deep Networkscited by 3,350
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2018Glow: Generative Flow with Invertible 1x1 Convolutionscited by 1,539
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
- 2017SmoothGrad: removing noise by adding noisecited by 1,097
35 more
- 2017ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseasescited by 969
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2016Adversarial Machine Learning at Scalecited by 934
- 2018Robustness May Be at Odds with Accuracycited by 873
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2019Adversarial Training for Free!cited by 638
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
- 2018Do Deep Generative Models Know What They Don't Know?cited by 443
- 2017Training Confidence-calibrated Classifiers for Detecting Out-of-Distribution Samplescited by 389
- 2017Defense against Adversarial Attacks Using High-Level Representation Guided Denoisercited by 329
- 2017MagNet: a Two-Pronged Defense against Adversarial Examplescited by 268
- 2019Improving Adversarial Robustness via Promoting Ensemble Diversitycited by 213
- 2019Full-Gradient Representation for Neural Network Visualizationcited by 189
- 2020Contrastive Training for Improved Out-of-Distribution Detectioncited by 186
- 2019You Only Propagate Once: Accelerating Adversarial Training via Maximal Principlecited by 181
- 2020SaliencyMix: A Saliency Guided Data Augmentation Strategy for Better Regularizationcited by 149
- 2020Hybrid Models for Open Set Recognitioncited by 109
- 2020COVID-19 Image Data Collectioncited by 100
- 2021Improving Deep Learning Interpretability by Saliency Guided Trainingcited by 68
- 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
- 2020On the limits of cross-domain generalization in automated X-ray predictioncited by 61
- 2019Adversarial Defense by Restricting the Hidden Space of Deep Neural Networkscited by 56
- 2019Robust Attribution Regularizationcited by 46
- 2021Consistency Regularization for Adversarial Robustnesscited by 42
- 2019Hybrid Models with Deep and Invertible Featurescited by 41
- 2020Proper Network Interpretability Helps Adversarial Robustness in Classificationcited by 41
- 2020A Critic Evaluation of Methods for COVID-19 Automatic Detection from X-Ray Imagescited by 28
- 2020Open-set Adversarial Defensecited by 27
- 2019A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbationscited by 11
- 2020Improving Adversarial Robustness via Probabilistically Compact Loss with Logit Constraintscited by 10
- 2019When Causal Intervention Meets Adversarial Examples and Image Masking for Deep Neural Networkscited by 7
- 2020Defending against adversarial attacks on medical imaging AI system, classification or detection?cited by 6
- 2018Minimum Margin Loss for Deep Face Recognitioncited by 5
Built on by
Citing papers per year: 2024: 2.
2 papers.