Triggering hallucinations in model-based MRI reconstruction via adversarial perturbations
Not on the map. Why?
Abstract (arXiv)
Generative models are increasingly used to improve the quality of medical imaging, such as reconstruction of magnetic resonance images and computed tomography. However, it is well-known that such models are susceptible to hallucinations: they may insert features into the reconstructed image which are not actually present in the original image. In a medical setting, such hallucinations may endanger patient health as they can lead to incorrect diagnoses. In this work, we aim to quantify the extent to which state-of-the-art generative models suffer from hallucinations in the context of magnetic resonance image reconstruction. Specifically, we craft adversarial perturbations resembling random noise for the unprocessed input images which induce hallucinations when reconstructed using a generative model. We perform this evaluation on the brain and knee images from the fastMRI data set using UNet and end-to-end VarNet architectures to reconstruct the images. Our results show that these models are highly susceptible to small perturbations and can be easily coaxed into producing hallucinations. This fragility may partially explain why hallucinations occur in the first place and suggests that a carefully constructed adversarial training routine may reduce their prevalence. Moreover, these hallucinations cannot be reliably detected using traditional image quality metrics. Novel approaches will therefore need to be developed to detect when hallucinations have occurred.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 27 of its 58 references that are in the map. First posted on arXiv 20 Feb 2026.
Builds on
27 of 58 references.
References · 27
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Adversarial examples in the physical worldcited by 1,762
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2017Evasion Attacks against Machine Learning at Test Timecited by 686
- 2020On Adaptive Attacks to Adversarial Example Defensescited by 547
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
- 2018fastMRI: An Open Dataset and Benchmarks for Accelerated MRIcited by 464
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
- 2017MoDL: Model Based Deep Learning Architecture for Inverse Problemscited by 384
- 2017Learning a Variational Network for Reconstruction of Accelerated MRI Datacited by 340
15 more
- 2024Hallucination is Inevitable: An Innate Limitation of Large Language Modelscited by 329
- 2020End-to-End Variational Networks for Accelerated MRI Reconstructioncited by 201
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
- 2020Solving Inverse Problems With Deep Neural Networks -- Robustness Included?cited by 58
- 2021Can stable and accurate neural networks be computed? -- On the barriers of deep learning and Smale's 18th problemcited by 53
- 2021Measuring Robustness in Deep Learning Based Compressive Sensingcited by 53
- 2020The troublesome kernel -- On hallucinations, no free lunches and the accuracy-stability trade-off in inverse problemscited by 40
- 2020Adversarial Robustness of Supervised Sparse Codingcited by 22
- 2023Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challengescited by 16
- 2020Results of the 2020 fastMRI Challenge for Machine Learning MR Image Reconstructioncited by 14
- 2020Do CNNs solve the CT inverse problem?cited by 13
- 2022Adversarial Robustness of MR Image Reconstruction under Realistic Perturbationscited by 11
- 2024Deep Learning for Accelerated and Robust MRI Reconstruction: a Reviewcited by 9
- 2022Stability of Image-Reconstruction Algorithmscited by 7
- 2024Robust width: A lightweight and certifiable adversarial defensecited by 1
Built on by
Not cited yet.