mlsanityData to 14 Oct 2026

ACAT: Adversarial Counterfactual Attention for Classification and Detection in Medical Imaging

arXiv 2303.15421 ↗First posted 27 Mar 2023eess.IV cs.CV cs.LGcited by 9

Not on the map. Why?

Abstract (arXiv)

In some medical imaging tasks and other settings where only small parts of the image are informative for the classification task, traditional CNNs can sometimes struggle to generalise. Manually annotated Regions of Interest (ROI) are sometimes used to isolate the most informative parts of the image. However, these are expensive to collect and may vary significantly across annotators. To overcome these issues, we propose a framework that employs saliency maps to obtain soft spatial attention masks that modulate the image features at different scales. We refer to our method as Adversarial Counterfactual Attention (ACAT). ACAT increases the baseline classification accuracy of lesions in brain CT scans from 71.39% to 72.55% and of COVID-19 related findings in lung CT scans from 67.71% to 70.84% and exceeds the performance of competing methods. We investigate the best way to generate the saliency maps employed in our architecture and propose a way to obtain them from adversarially generated counterfactual images. They are able to isolate the area of interest in brain and lung CT scans without using any manual annotations. In the task of localising the lesion location out of 6 possible regions, they obtain a score of 65.05% on brain CT scans, improving the score of 61.29% obtained with the best competing method.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 46 of its 65 references that are in the map. First posted on arXiv 27 Mar 2023.

Builds on

46 of 65 references.

References · 46

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
  5. 2016Densely Connected Convolutional Networkscited by 6,720
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  7. 2013Intriguing properties of neural networkscited by 5,155
  8. 2017Squeeze-and-Excitation Networkscited by 4,789
  9. 2017Axiomatic Attribution for Deep Networkscited by 3,384
  10. 2018CBAM: Convolutional Block Attention Modulecited by 2,477
  11. 2015Learning Deep Features for Discriminative Localizationcited by 2,436
  12. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
34 more
  1. 2017Non-local Neural Networkscited by 2,293
  2. 2016Adversarial examples in the physical worldcited by 1,769
  3. 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,512
  4. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
  5. 2018Sanity Checks for Saliency Mapscited by 1,156
  6. 2017SmoothGrad: removing noise by adding noisecited by 1,109
  7. 2014Striving for Simplicity: The All Convolutional Netcited by 990
  8. 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 939
  9. 2016Stacked Hourglass Networks for Human Pose Estimationcited by 915
  10. 2018Robustness May Be at Odds with Accuracycited by 880
  11. 2018Self-Attention Generative Adversarial Networkscited by 809
  12. 2019Score-CAM: Score-Weighted Visual Explanations for Convolutional Neural Networkscited by 582
  13. 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 446
  14. 2017Residual Attention Network for Image Classificationcited by 386
  15. 2018How Does Batch Normalization Help Optimization?cited by 357
  16. 2017A simple neural network module for relational reasoningcited by 346
  17. 2016Top-down Neural Attention by Excitation Backpropcited by 321
  18. 2017Adversarial Attacks on Neural Network Policiescited by 320
  19. 2019An Investigation into Neural Net Optimization via Hessian Eigenvalue Densitycited by 292
  20. 2017Generating Natural Adversarial Examplescited by 183
  21. 2019Adversarial Training Can Hurt Generalizationcited by 132
  22. 2020MosMedData: Chest CT Scans With COVID-19 Related Findings Datasetcited by 104
  23. 2015Inside-Outside Net: Detecting Objects in Context with Skip Pooling and Recurrent Neural Networkscited by 80
  24. 2019On the Connection Between Adversarial Robustness and Saliency Map Interpretabilitycited by 80
  25. 2017Visual Feature Attribution using Wasserstein GANscited by 47
  26. 2020Towards Learning Convolutions from Scratchcited by 46
  27. 2019Testing the robustness of attribution methods for convolutional neural networks in MRI-based Alzheimer's disease classificationcited by 25
  28. 2019Needles in Haystacks: On Classifying Tiny Objects in Large Imagescited by 13
  29. 2018Saliency for Fine-grained Object Recognition in Domains with Scarce Training Datacited by 10
  30. 2021Stabilized Medical Image Attackscited by 10
  31. 2018Regularizing by the Variance of the Activations' Sample-Variancescited by 5
  32. 2017Top-Down Saliency Detection Driven by Visual Classificationcited by 4
  33. 2020Hallucinating Saliency Maps for Fine-Grained Image Classification for Limited Data Domainscited by 3
  34. 2019Detecting cutaneous basal cell carcinomas in ultra-high resolution and weakly labelled histopathological imagescited by 1

Built on by

Cited by year

Citing papers per year: 2023: 3; 2024: 3; 2025: 3.

9 papers.