Stain-Aware Wavelet Regularization for Instant Adversarial Purification in Histopathology
Not on the map. Why?
Abstract (arXiv)
Deep learning has become prevalent in computational pathology pipelines that support tasks such as cancer screening and digital pathology analysis. However, the susceptibility of neural networks to adversarial perturbations raises safety concerns for reliable deployment in clinical practice. In histopathological images, this challenge is exacerbated by the difficulty of distinguishing high-frequency adversarial noise from subtle and diagnostically relevant tissue structures. To address this issue, we propose Stain-Aware Wavelet Regularization (SAWR), an adversarial purification framework that leverages multi-level wavelet-domain regularization based on Haar transform to hierarchically disentangle adversarial perturbations from diagnostic structural information. This spectral constraint is further extended to individual histological channels, enabling stain-specific frequency regulation consistent with the biological properties of Hematoxylin and Eosin. Extensive experiments demonstrate that SAWR improves adversarial robustness by up to 10.69% over the baseline approach, while maintaining texture and spectral fidelity under adversarial perturbations.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 20 of its 30 references that are in the map. First posted on arXiv 7 Jun 2026.
Builds on
20 of 30 references.
References · 20
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2023Latent Consistency Models: Synthesizing High-Resolution Images with Few-Step Inferencecited by 846
- 2021MedMNIST v2 -- A large-scale lightweight benchmark for 2D and 3D biomedical image classificationcited by 690
- 2022Diffusion Models for Adversarial Purificationcited by 476
- 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
- 2021Improving Robustness using Generated Datacited by 234
- 2023LCM-LoRA: A Universal Stable-Diffusion Acceleration Modulecited by 211
- 2018Multi-level Wavelet-CNN for Image Restorationcited by 184
8 more
- 2019Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systemscited by 153
- 2018Towards the first adversarially robust neural network model on MNISTcited by 104
- 2022Guided Diffusion Model for Adversarial Purificationcited by 92
- 2023Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Modelscited by 79
- 2020Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factorscited by 40
- 2023Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challengescited by 17
- 2024Instant Adversarial Purification with Adversarial Consistency Distillationcited by 14
- 2024Demonstration of an Adversarial Attack Against a Multimodal Vision Language Model for Pathology Imagingcited by 10
Built on by
Not cited yet.