Hierarchical Self-Supervised Adversarial Training for Robust Vision Models in Histopathology
Not on the map. Why?
Abstract (arXiv)
Adversarial attacks pose significant challenges for vision models in critical fields like healthcare, where reliability is essential. Although adversarial training has been well studied in natural images, its application to biomedical and microscopy data remains limited. Existing self-supervised adversarial training methods overlook the hierarchical structure of histopathology images, where patient-slide-patch relationships provide valuable discriminative signals. To address this, we propose Hierarchical Self-Supervised Adversarial Training (HSAT), which exploits these properties to craft adversarial examples using multi-level contrastive learning and integrate it into adversarial training for enhanced robustness. We evaluate HSAT on multiclass histopathology dataset OpenSRH and the results show that HSAT outperforms existing methods from both biomedical and natural image domains. HSAT enhances robustness, achieving an average gain of 54.31% in the white-box setting and reducing performance drops to 3-4% in the black-box setting, compared to 25-30% for the baseline. These results set a new benchmark for adversarial training in this domain, paving the way for more robust models. Our Code for training and evaluation is available at https://github.com/HashmatShadab/HSAT.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 24 of its 32 references that are in the map. First posted on arXiv 13 Mar 2025.
Builds on
24 of 32 references.
References · 24
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Wide Residual Networkscited by 3,070
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Adversarial examples in the physical worldcited by 1,769
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2017One pixel attack for fooling deep neural networkscited by 582
12 more
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2020Self supervised contrastive learning for digital histopathologycited by 146
- 2020Adversarial Self-Supervised Contrastive Learningcited by 139
- 2019Cross-Domain Transferability of Adversarial Perturbationscited by 92
- 2021When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?cited by 77
- 2022Self-Supervised Vision Transformers Learn Visual Concepts in Histopathologycited by 50
- 2021Self-Supervised Representation Learning using Visual Field Expansion on Digital Pathologycited by 25
- 2023Rethinking the Effect of Data Augmentation in Adversarial Contrastive Learningcited by 20
- 2023Hierarchical discriminative learning improves visual representations of biomedical microscopycited by 12
- 2022OpenSRH: optimizing brain tumor surgery using intraoperative stimulated Raman histologycited by 9
- 2021Now You See It, Now You Dont: Adversarial Vulnerabilities in Computational Pathologycited by 7
- 2022Adversarial Pixel Restoration as a Pretext Task for Transferable Perturbationscited by 6
Built on by
Not cited yet.