Medical Unlearnable Examples: Securing Medical Data from Unauthorized Training via Sparsity-Aware Local Masking
Not on the map. Why?
Abstract (arXiv)
The rapid expansion of AI in healthcare has led to a surge in medical data generation and storage, boosting medical AI development. However, fears of unauthorized use, like training commercial AI models, hinder researchers from sharing their valuable datasets. To encourage data sharing, one promising solution is to introduce imperceptible noise into the data. This method aims to safeguard the data against unauthorized training by inducing degradation in the generalization ability of the trained model. However, they are not effective and efficient when applied to medical data, mainly due to the ignorance of the sparse nature of medical images. To address this problem, we propose the Sparsity-Aware Local Masking (SALM) method, a novel approach that selectively perturbs significant pixel regions rather than the entire image as previously. This simple yet effective approach, by focusing on local areas, significantly narrows down the search space for disturbances and fully leverages the characteristics of sparsity. Our extensive experiments across various datasets and model architectures demonstrate that SALM effectively prevents unauthorized training of different models and outperforms previous SoTA data protection methods.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Builds on 33 of its 76 references that are in the map. First posted on arXiv 15 Mar 2024.
Builds on
33 of 76 references.
References · 33
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2019CheXpert: A Large Chest Radiograph Dataset with Uncertainty Labels and Expert Comparisoncited by 1,423
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
- 2021MedMNIST v2 -- A large-scale lightweight benchmark for 2D and 3D biomedical image classificationcited by 690
- 2019MIMIC-CXR-JPG, a large publicly available database of labeled chest radiographscited by 597
- 2019The Liver Tumor Segmentation Benchmark (LiTS)cited by 509
- 2019A large annotated medical image dataset for the development and evaluation of segmentation algorithmscited by 373
- 2020Med-BERT: pre-trained contextualized embeddings on large-scale structured electronic health records for disease predictioncited by 373
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
21 more
- 2018Scalable and accurate deep learning for electronic health recordscited by 280
- 2021DatasetGAN: Efficient Labeled Data Factory with Minimal Human Effortcited by 264
- 2020MedMNIST Classification Decathlon: A Lightweight AutoML Benchmark for Medical Image Analysiscited by 206
- 2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 197
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
- 2021Adversarial Examples Make Strong Poisonscited by 119
- 2021Availability Attacks Create Shortcutscited by 62
- 2023Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Handcited by 57
- 2017Generative Poisoning Attack Method Against Neural Networkscited by 52
- 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 47
- 2022Transferable Unlearnable Examplescited by 43
- 2020COVIDNet-CT: A Tailored Deep Convolutional Neural Network Design for Detection of COVID-19 Cases from Chest CT Imagescited by 39
- 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 36
- 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 35
- 2022Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learningcited by 34
- 2019LNDb: A Lung Nodule Database on Computed Tomographycited by 28
- 2022UnGANable: Defending Against GAN-based Face Manipulationcited by 15
- 2023Unlearnable Graph: Protecting Graphs from Unauthorized Exploitationcited by 5
- 2023Securing Biomedical Images from Unauthorized Training with Anti-Learning Perturbationcited by 4
- 2023GraphCloak: Safeguarding Task-specific Knowledge within Graph-structured Data from Unauthorized Exploitationcited by 4
Built on by
Citing papers per year: 2024: 3; 2025: 1; 2026: 4.
8 papers.
- 2024AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Modelscited by 5
- 2025A Survey on Unlearnable Datacited by 5
- 2024Rethinking and Red-Teaming Protective Perturbation in Personalized Diffusion Modelscited by 4
- 2024SoK: Security and Privacy Risks of Healthcare AIcited by 2
- 2026Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Informationcited by 2
- 2026X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imagingcited by 1
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026Unlearnable Faces: Privacy Protection Surviving Extraction Pipelinecited by 0
- 2026Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline7 Jul 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information4 Mar 2026
- 2026X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging10 Feb 2026
- 2025A Survey on Unlearnable Data30 Mar 2025
- 2024SoK: Security and Privacy Risks of Healthcare AI11 Sep 2024
- 2024AdvLogo: Adversarial Patch Attack against Object Detectors based on Diffusion Models11 Sep 2024
- 2024Rethinking and Red-Teaming Protective Perturbation in Personalized Diffusion Models27 Jun 2024