Privacy-Preserving Federated Brain Tumour Segmentation
Open accessAbstract
Due to medical data privacy regulations, it is often infeasible to collect and share patient data in a centralised data lake. This poses challenges for training machine learning algorithms, such as deep convolutional networks, which often require large numbers of diverse training examples. Federated learning sidesteps this difficulty by bringing code to the patient data owners and only sharing intermediate model training updates among them. Although a high-accuracy model could be achieved by appropriately aggregating these model updates, the model shared could indirectly leak the local training examples. In this paper, we investigate the feasibility of applying differential-privacy techniques to protect the patient data in a federated learning setup. We implement and evaluate practical federated learning systems for brain tumour segmentation on the BraTS dataset. The experimental results show that there is a trade-off between model performance and privacy protection costs.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Medical data is particularly diverse, and inhomogeneous data distribution poses a challenge for federated learning algorithms and strategies, as many assume independently and identically distributed data; strategies such as FedAvg are prone to fail under these conditions, but recent results indicate that FL training is still feasible even if medical data is not uniformly distributed or includes a
“Medical data is particularly diverse—not only because of the variety of modalities, dimensionality and characteristics in general, but even within a specific protocol due to factors such as acquisition differences, brand of the medical device or local demographics.”
From The future of digital health with federated learning (2020) · cites this paper as [16]
Split into 2 atoms — 1 confirmed, 1 partially supported, 0 disputed, 0 misattributed, 0 unverifiable. Expand the claim to see per-atom verdicts.
Experimental — accuracy not yet measuredModels trained by federated learning can achieve performance levels comparable to ones trained on centrally hosted data sets and superior to models that only see isolated single-institutional data.
“Recent research has shown that models trained by FL can achieve performance levels comparable to ones trained on centrally hosted data sets and superior to models that only see isolated single-institutional data16,17.”
From The future of digital health with federated learning (2020) · cites this paper as [16]
The Results section (‘Federated vs. data-centralised training’; page not available in our copy) says the proposed federated procedure achieved comparable segmentation performance to centralised training. The Data preparation section describes clients using data from individual institutions, but the paper does not report a performance comparison showing that the federated model outperformed models trained only on single-institution data. (LLM, conf=0.86)
Experimental — accuracy not yet measuredDecentralized data storage and federated learning systems have recently demonstrated results in medical imaging and genomics.
“with results in medical imaging 50,86 and genomics 87 recently demonstrated.”
From Secure, privacy-preserving and federated machine learning in medical imaging (2020) · cites this paper as [86]
The well-known trade-off between security and performance is also observed in benchmarking using this DP implementation.
“This well-known trade-off between security and performance [42] is also observed in benchmarking using this DP implementation [38].”
From A Pragmatic Framework for Federated Learning Risk and Governance in Academic Medical Centers (2026) · cites this paper as [38]
Models reached comparable performance when only 25% of weight updates were shared in a partial weight-sharing scheme.
“we showed that models can reach a comparable performance even when only 25% of the weight updates are shared”
From Federated learning for predicting clinical outcomes in patients with COVID-19 (2021) · cites this paper as [50]
FL was demonstrated for brain tumor segmentation.
“A complete brain part of an MRI [55] is helpful, and for brain tumor segmentation [56], the usage and advantages of FL were further demonstrated.”
From A comprehensive survey on federated learning techniques for healthcare informatics (2023) · cites this paper as [56]
Given the fact that there can be no comprehensive information distribution among institutions, FL can be trained using non-IID data.
“Given the fact that there can be no comprehensive information distribution among institutions [56, 62], FL can be trained using non-IID data.”
From A comprehensive survey on federated learning techniques for healthcare informatics (2023) · cites this paper as [56]
A general FL-trained model can achieve performance levels comparable to models trained on centrally hosted datasets and superior to models that only see isolated single-institutional data.
“Independently of the FL training strategy, a recent analysis for the medical field has shown that a general FL-trained model can achieve performance levels comparable to the ones trained on centrally hosted datasets and superior to models that only see isolated single-institutional data [27], [28].”
From Handling privacy-sensitive medical data with federated learning: Challenges and future directions (2023) · cites this paper as [27]
An FL model for federated brain imaging using DNNs for brain tumour segmentation achieves similar segmentation performance with the ideal centralized scheme while a degree of privacy protection is achieved.
“Simulations are conducted using a brain tumour dataset containing multiparametric pre-operative MRI scans of 285 subjects, indicating a similar segmentation performance with the ideal centralized scheme, while a degree of privacy protection is achieved.”
From Federated learning for smart healthcare: A survey (2023) · cites this paper as [99]
FL is able to be deployed on medical devices such as MRI scan machine which has enough local dataset and reasonable computational resources to compute AI updates to join FL process with cloud server.
“Particularly, FL is able to be deployed on medical devices such as MRI scan machine [99] which has enough local dataset and reasonable computational resources to compute AI updates to join the FL process with the cloud server.”
From Federated learning for smart healthcare: A survey (2023) · cites this paper as [99]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215 · see citing works
Deep Learning with Differential Privacy
Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., & Zhang, L. (2016) · Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2976749.2978318 · Cited by 6,578 · see citing works
Revisiting Unreasonable Effectiveness of Data in Deep Learning Era
Sun, C., Shrivastava, A., Singh, S., & Gupta, A. (2017) · 2017 IEEE International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2017.97 · Cited by 2,484 · see citing works
Privacy-preserving deep learning
Shokri, R., & Shmatikov, V. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813687 · Cited by 2,356 · see citing works
Bakas, S., Reyes, M., Jakab, A., Bauer, S., Rempfler, M., Crimi, A., Shinohara, R. T., Berger, C., Ha, S. M., Rozycki, M., et al. (2018) · Apollo - University of Cambridge Repository · doi:10.17863/cam.38755 · Cited by 1,441 · see citing works
Self-citationDeep Models Under the GAN: Information Leakage from Collaborative Deep Learning
Hitaj, B., Ateniese, G., & Perez-Cruz, F. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134012 · Cited by 1,377 · see citing works
3D MRI Brain Tumor Segmentation Using Autoencoder Regularization
Myronenko, A. (2019) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-11726-9_28 · Cited by 1,283 · see citing works
Sheller, M. J., Reina, G. A., Edwards, B., Martin, J., & Bakas, S. (2019) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-11723-8_9 · Cited by 609 · see citing works
Yu, H., Jin, R., & Yang, S. (2019) · arXiv · doi:10.48550/arxiv.1905.03817 · Cited by 244 · see citing works
Understanding the sparse vector technique for differential privacy
Lyu, M., Su, D., & Li, N. (2017) · Proceedings of the VLDB Endowment · doi:10.14778/3055330.3055331 · Cited by 129 · see citing works
Flagged first, then by citations
Research works printed but not linked: 1
- [4]Kingma DP Ba J Adam: A method for stochastic optimization arXiv preprint arXiv 2014 1412.6980
Cited by
Sorted by citations
The future of digital health with federated learning
Rieke, N., Hancox, J., Li, W., Milletarì, F., Roth, H. R., Albarqouni, S., Bakas, S., Galtier, M. N., Landman, B. A., Maier-Hein, K., et al. (2020) · npj Digital Medicine · doi:10.1038/s41746-020-00323-1 · Cited by 3,119 · see citing works
“Recent research has shown that this approach can achieve a performance that is comparable to a scenario where the data was co-located in a data lake and superior to the models that only see isolated singleinstitutional data [12, 13].”
BackgroundMethodResultInfluentialSelf-citationSheller, M. J., Edwards, B., Reina, G. A., Martin, J., Pati, S., Kotrotsou, A., Milchenko, M., Xu, W., Marcus, D., Colen, R. R., et al. (2020) · Scientific Reports · doi:10.1038/s41598-020-69250-1 · Cited by 1,646 · see citing works
Secure, privacy-preserving and federated machine learning in medical imaging
Kaissis, G. A., Makowski, M. R., Rückert, D., & Braren, R. F. (2020) · Nature Machine Intelligence · doi:10.1038/s42256-020-0186-1 · Cited by 1,501 · see citing works
Federated learning for predicting clinical outcomes in patients with COVID-19
Dayan, I., Roth, H. R., Zhong, A., Harouni, A., Gentili, A., Abidin, A. Z., Liu, A., Costa, A. B., Wood, B. J., Tsai, C.-S., et al. (2021) · Nature Medicine · doi:10.1038/s41591-021-01506-3 · Cited by 842 · see citing works
Self-citationFederated learning for smart healthcare: A survey
Nguyen, D. C., Pham, Q.-V., Pathirana, P. N., Ding, M., Seneviratne, A., Lin, Z., Dobre, O., & Hwang, W.-J. (2023) · ACM Computing Surveys · doi:10.1145/3501296 · Cited by 827 · see citing works
Abdulrahman, S., Tout, H., Ould-Slimane, H., Mourad, A., Talhi, C., & Guizani, M. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3030072 · Cited by 796 · see citing works
A Survey on Federated Learning for Resource-Constrained IoT Devices
Imteaj, A., Thakker, U., Wang, S., Li, J., & Amini, M. H. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3095077 · Cited by 774 · see citing works
Federated Learning: A Survey on Enabling Technologies, Protocols, and Applications
Aledhari, M., Razzak, R., Parizi, R. M., & Saeed, F. (2020) · IEEE Access · doi:10.1109/access.2020.3013541 · Cited by 733 · see citing works
Algorithmic fairness in artificial intelligence for medicine and healthcare
Chen, R. J., Wang, J. J., Williamson, D. F. K., Chen, T. Y., Lipkova, J., Lu, M. Y., Sahai, S., & Mahmood, F. (2023) · Nature Biomedical Engineering · doi:10.1038/s41551-023-01056-8 · Cited by 750 · see citing works
Privacy-preserving artificial intelligence in healthcare: Techniques and applications
Khalid, N., Qayyum, A., Bilal, M., Al-Fuqaha, A., & Qadir, J. (2023) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2023.106848 · Cited by 581 · see citing works
End-to-end privacy preserving deep learning on multi-institutional medical imaging
Kaissis, G., Ziller, A., Passerat-Palmbach, J., Ryffel, T., Usynin, D., Trask, A., Lima, I., Mancuso, J., Jungmann, F., Steinborn, M.-M., et al. (2021) · Nature Machine Intelligence · doi:10.1038/s42256-021-00337-8 · Cited by 513 · see citing works
Federated learning for medical image analysis: A survey
Guan, H., Yap, P.-T., Bozoki, A., & Liu, M. (2024) · Pattern Recognition · doi:10.1016/j.patcog.2024.110424 · Cited by 518 · see citing works
Li, X., Gu, Y., Dvornek, N., Staib, L. H., Ventola, P., & Duncan, J. S. (2020) · Medical Image Analysis · doi:10.1016/j.media.2020.101765 · Cited by 480 · see citing works
Federated Learning for Privacy Preservation in Smart Healthcare Systems: A Comprehensive Survey
Ali, M., Naeem, F., Tariq, M., & Kaddoum, G. (2023) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2022.3181823 · Cited by 366 · see citing works
Privacy-Enhanced Federated Learning Against Poisoning Adversaries
Liu, X., Li, H., Xu, G., Chen, Z., Huang, X., & Lu, R. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3108434 · Cited by 351 · see citing works
Rauniyar, A., Hagos, D. H., Jha, D., Håkegård, J. E., Bagci, U., Rawat, D. B., & Vlassov, V. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3329061 · Cited by 315 · see citing works
Yang, D., Xu, Z., Li, W., Myronenko, A., Roth, H. R., Harmon, S., Xu, S., Turkbey, B., Turkbey, E., Wang, X., et al. (2021) · Medical Image Analysis · doi:10.1016/j.media.2021.101992 · Cited by 279 · see citing works
Self-citationFederated learning for computational pathology on gigapixel whole slide images
Lu, M. Y., Chen, R. J., Kong, D., Lipkova, J., Singh, R., Williamson, D. F. K., Chen, T. Y., & Mahmood, F. (2022) · Medical Image Analysis · doi:10.1016/j.media.2021.102298 · Cited by 267 · see citing works
Federated learning improves site performance in multicenter deep learning without data sharing
Sarma, K. V., Harmon, S., Sanford, T., Roth, H. R., Xu, Z., Tetreault, J., Xu, D., Flores, M. G., Raman, A. G., Kulkarni, R., et al. (2021) · Journal of the American Medical Informatics Association · doi:10.1093/jamia/ocaa341 · Cited by 242 · see citing works
Self-citationFederated learning for secure IoMT-applications in smart healthcare systems: A comprehensive review
Rani, S., Kataria, A., Kumar, S., & Tiwari, P. (2023) · Knowledge-Based Systems · doi:10.1016/j.knosys.2023.110658 · Cited by 228 · see citing works
Prayitno, Shyu, C.-R., Putra, K. T., Chen, H.-C., Tsai, Y.-Y., Hossain, K. S. M. T., Jiang, W., & Shae, Z.-Y. (2021) · Applied Sciences · doi:10.3390/app112311191 · Cited by 210 · see citing works
Federated Learning for Breast Density Classification: A Real-World Implementation
Roth, H. R., Chang, K., Singh, P., Neumark, N., Li, W., Gupta, V., Gupta, S., Qu, L., Ihsani, A., Bizzo, B. C., et al. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-60548-3_18 · Cited by 202 · see citing works
Self-citationGuo, P., Wang, P., Zhou, J., Jiang, S., & Patel, V. M. (2021) · 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr46437.2021.00245 · Cited by 193 · see citing works
Handling privacy-sensitive medical data with federated learning: Challenges and future directions
Aouedi, O., Sacco, A., Piamrat, K., & Marchetto, G. (2023) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2022.3185673 · Cited by 165 · see citing works
POSEIDON: Privacy-Preserving Federated Neural Network Learning
Sav, S., Pyrgelis, A., Troncoso-Pastoriza, J. R., Froelicher, D., Bossuat, J.-P., Sousa, J. S., & Hubaux, J.-P. (2021) · Proceedings 2021 Network and Distributed System Security Symposium · doi:10.14722/ndss.2021.24119 · Cited by 162 · see citing works
Ng, D., Lan, X., Yao, M. M.-S., Chan, W. P., & Feng, M. (2021) · Quantitative Imaging in Medicine and Surgery · doi:10.21037/qims-20-595 · Cited by 152 · see citing works
Linardos, A., Kushibar, K., Walsh, S., Gkontra, P., & Lekadir, K. (2022) · Scientific Reports · doi:10.1038/s41598-022-07186-4 · Cited by 130 · see citing works
A comprehensive survey on federated learning techniques for healthcare informatics
Dasaradharami Reddy, K., & Gadekallu, T. R. (2023) · Computational Intelligence and Neuroscience · doi:10.1155/2023/8393990 · Cited by 126 · see citing works
Memory-aware curriculum federated learning for breast cancer classification
Jiménez-Sánchez, A., Tardy, M., González Ballester, M. A., Mateus, D., & Piella, G. (2023) · Computer Methods and Programs in Biomedicine · doi:10.1016/j.cmpb.2022.107318 · Cited by 114 · see citing works
Naeem, A., Anees, T., Naqvi, R. A., & Loh, W.-K. (2022) · Journal of Personalized Medicine · doi:10.3390/jpm12020275 · Cited by 103 · see citing works
Split Federated Learning for 6G Enabled-Networks: Requirements, Challenges, and Future Directions
Hafi, H., Brik, B., Frangoudis, P. A., Ksentini, A., & Bagaa, M. (2024) · IEEE Access · doi:10.1109/access.2024.3351600 · Cited by 90 · see citing works
Federated Learning for Privacy-Preserving Open Innovation Future on Digital Health
Long, G., Shen, T., Tan, Y., Gerrard, L., Clarke, A., & Jiang, J. (2022) · Humanity Driven AI · doi:10.1007/978-3-030-72188-6_6 · Cited by 85 · see citing works
Zhou, J., Chen, S., Wu, Y., Li, H., Zhang, B., Zhou, L., Hu, Y., Xiang, Z., Li, Z., Chen, N., et al. (2024) · Science Advances · doi:10.1126/sciadv.adh8601 · Cited by 63 · see citing works
Protecting Personal Healthcare Record Using Blockchain & Federated Learning Technologies
Aich, S., Sinai, N. K., Kumar, S., Ali, M., Choi, Y. R., Joo, M.-I., & Kim, H.-C. (2022) · 2022 24th International Conference on Advanced Communication Technology (ICACT) · doi:10.23919/icact53585.2022.9728772 · Cited by 49 · see citing works
Adam, M., & Baroudi, U. (2024) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2024.3506214 · Cited by 46 · see citing works
Multi-task Federated Learning for Heterogeneous Pancreas Segmentation
Shen, C., Wang, P., Roth, H. R., Yang, D., Xu, D., Oda, M., Wang, W., Fuh, C.-S., Chen, P.-T., Liu, K.-L., et al. (2021) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-90874-4_10 · Cited by 36 · see citing works
Self-citationThe role of federated learning models in medical imaging
Kwak, L., & Bai, H. (2023) · Radiology Artificial Intelligence · doi:10.1148/ryai.230136 · Cited by 25 · see citing works
Federated Gradient Averaging for Multi-Site Training with Momentum-Based Optimizers
Remedios, S. W., Butman, J. A., Landman, B. A., & Pham, D. L. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-60548-3_17 · Cited by 19 · see citing works
Scaling Neuroscience Research Using Federated Learning
Stripelis, D., Ambite, J. L., Lam, P., & Thompson, P. (2021) · 2021 IEEE 18th International Symposium on Biomedical Imaging (ISBI) · doi:10.1109/isbi48211.2021.9433925 · Cited by 29 · see citing works
Weimann, K., & Conrad, T. O. F. (2024) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2024.3427787 · Cited by 19 · see citing works
Have You Forgotten? A Method to Assess if Machine Learning Models Have Forgotten Data
Liu, X., & Tsaftaris, S. A. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-59710-8_10 · Cited by 18 · see citing works
Federated Learning for Multi-Center Imaging Diagnostics: A Study in Cardiovascular Disease
Linardos, A., Kushibar, K., Walsh, S., Gkontra, P., & Lekadir, K. (2021) · doi:10.21203/rs.3.rs-688924/v1 · Cited by 9 · see citing works
A Pragmatic Framework for Federated Learning Risk and Governance in Academic Medical Centers
Bottomly, D., Barnes, B., Mavuwa, K., Lee, N., Roth, H. R., Chen, C., & McWeeney, S. K. (2026) · JMIR AI · doi:10.2196/80022 · Cited by 3 · see citing works
“In particular, this is where privacy-preserving filters such as DP are implemented [38].”
- Authors
- Li, W., Milletarì, F., Xu, D., Rieke, N., Hancox, J., Zhu, W., Baust, M., Cheng, Y., Ourselin, S., Cardoso, M. J., & Feng, A.
- Affiliations
- Nvidia (United Kingdom) (GB)
- King's College London (GB)
- Corresponding author
- Li, Wenqi
- ORCID
- Venue
- Lecture Notes in Computer Science
- Publisher
- Springer International Publishing
- Published
- 2019
- Volume
- 11861
- Pages
- 133-141
- ISSN
- 0302-9743 (ISSN-L)
- 1611-3349
- PMC
- PMC7616593
- OpenAlex
- W2979637109
- Semantic Scholar
- 8d15862c9414b447e40b531fcd7ea378820bbd57
- Cited by
- 578
- References
- 10
- Citations by year
- 2026: 50 · 2025: 86 · 2024: 108 · 2023: 104 · 2022: 116 · 2021: 85 · 2020: 29
- FWCI
- 22.00
- Type
- conference paper
- Language
- en
- Open access
- green
- www.ncbi.nlm.nih.gov
- Licence
- Locations
- Lecture notes in computer science (publishedVersion)
- PubMed (publishedVersion)
- PubMed Central (acceptedVersion)
- arXiv (Cornell University) (submittedVersion)
- Research Portal (King's College London) (submittedVersion)
- arXiv (Cornell University)
- Funders
- Nvidia
- Wellcome Trust (203148, 213038)
- UK Research and Innovation
- National Institute for Health and Care Research
- King's College London (WT203148/Z/16/Z)
- Engineering and Physical Sciences Research Council ([WT203148/Z/16/Z], WT213038/Z/18/Z)
- Centre For Medical Engineering, King’s College London (WT 203148/Z/16/Z)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Life Sciences › Neuroscience › Neurology › Brain Tumor Detection and Classification
- Health Sciences › Medicine › Health Informatics › Artificial Intelligence in Healthcare and Education
- Keywords
- federated learning, differential privacy, brain tumor segmentation, medical data privacy, BraTS, privacy-accuracy trade-off, convolutional neural networks
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review