Adversarial attacks on medical machine learning
Open accessAbstract
Emerging vulnerabilities demand new conversations
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Even small, imperceptible variations in the input data might lead AI models into incorrect decisions.
“Existing research has shown that even small, imperceptible variations in the input data might lead AI models into incorrect decisions.60”
From FUTURE-AI: international consensus guideline for trustworthy and deployable artificial intelligence in healthcare (2025) · cites this paper as [60]
Changes to medical imaging that are invisible, or appear random, to the human eye may change the likelihood of the diagnostic output entirely.
“changes to medical imaging that are invisible, or appear random, to the human eye may change the likelihood of the diagnostic output entirely55,56.”
From Reporting guidelines for clinical trial reports for interventions involving artificial intelligence: the CONSORT-AI extension (2020) · cites this paper as [56]
Changes to medical imaging that are invisible, or appear random, to the human eye may change the likelihood of the resultant diagnostic output entirely.
“For example, changes to medical imaging that are invisible, or appear random, to the human eye may change the likelihood of the resultant diagnostic output entirely47,48.”
From Guidelines for clinical trial protocols for interventions involving artificial intelligence: the SPIRIT-AI extension (2020) · cites this paper as [48]
Finlayson et al. showed that a system's output can be completely changed so that it classifies a mole as malignant with 100% confidence by making a small change in how inputs are presented.
“For example, Finlayson et al. [110] have shown in a recent publication that the system’s output can completely be changed so that it classifies a mole as malignant with 100% confidence by making a small change in how inputs are presented to the system [109].”
From Ethical and legal challenges of artificial intelligence-driven healthcare (2020) · cites this paper as [110]
There is always a relatively high risk of adversarial attacks on health data systems.
“There is always a relatively high risk of adversarial attacks on health data systems [155]”
From Operationalising ethics in artificial intelligence for healthcare: a framework for AI developers (2023) · cites this paper as [155]
Adversarial ML attacks have already been realized on ML/DL-based medical systems.
“Moreover, such attacks have been already realized on ML/DL-based medical systems [31].”
From Explainable, trustworthy, and ethical machine learning for healthcare: A survey (2022) · cites this paper as [31]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Opportunities and obstacles for deep learning in biology and medicine
Ching, T., Himmelstein, D. S., Beaulieu-Jones, B. K., Kalinin, A. A., Do, B. T., Way, G. P., Ferrero, E., Agapow, P.-M., Zietz, M., Hoffman, M. M., et al. (2018) · Journal of The Royal Society Interface · doi:10.1098/rsif.2017.0387 · Cited by 2,310 · see citing works
End-To-End Arguments In System Design
And, S. R., Saltzer, J. H., Reed, D. P., & Clark, D. D. (1984) · Cited by 2,130 · see citing works
Wild patterns: Ten years after the rise of adversarial machine learning
Biggio, B., & Roli, F. (2018) · Pattern Recognition · doi:10.1016/j.patcog.2018.07.023 · Cited by 1,444 · see citing works
The Future of the Internet--And How to Stop It
Zittrain, J. L. (2008) · Digital Access to Scholarship at Harvard (DASH) (Harvard University) · Cited by 1,371 · see citing works
Self-citationRobustness May Be at Odds with AccuracyPreprint
Tsipras, D., Santurkar, S., Engstrom, L., Turner, A., & Mądry, A. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1805.12152 · Cited by 1,240 · see citing works
(2017) · doi:10.48550/arxiv.1712.02779 · Cited by 300 · see citing works
Physician manipulation of reimbursement rules for patients: between a rock and a hard place.
Wynia, M. K., Cummins, D. S., VanGeest, J. B., & Wilson, I. B. (2000) · PubMed · doi:10.1001/jama.283.14.1858 · Cited by 238 · see citing works
Adversarial Attacks Against Medical Deep Learning SystemsPreprint
Finlayson, S. G., Chung, H. W., Kohane, I. S., & Beam, A. L. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1804.05296 · Cited by 174 · see citing works
Self-citationCorruption: medicine's dirty open secret
Jain, A., Nundy, S., & Abbasi, K. A. (2014) · BMJ · doi:10.1136/bmj.g4184 · Cited by 69 · see citing works
Overbilling vs. Downcoding — The Battle between Physicians and Insurers
Kesselheim, A. S., & Brennan, T. A. (2005) · New England Journal of Medicine · doi:10.1056/nejmp058011 · Cited by 26 · see citing works
Reynolds, K., Muntner, P., & Fonseca, V. A. (2005) · Diabetes Care · doi:10.2337/diacare.28.7.1831 · Cited by 24 · see citing works
Comparison of Anesthesia Times and Billing Patterns by Anesthesia Practitioners
Sun, E. C., Dutton, R. P., & Jena, A. B. (2018) · JAMA Network Open · doi:10.1001/jamanetworkopen.2018.4288 · Cited by 11 · see citing works
Flagged first, then by citations
Research works printed but not linked: 4
- N. Dalvi ., in KDD '04: Proceedings of the 10th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (ACM, New York, 2004).
- J. Li S. Ji T. Du B. Li T. Wang arXiv:1812.05271 [cs.CR] (13 December 2018). · arXiv
- A. Jain, S. Nundy, K. Abbasi, BMJ 348, g4181 (2014).
- 10.1145/357401.357402 · DOI
Cited by
Sorted by citations
Key challenges for delivering clinical impact with artificial intelligence
Kelly, C. J., Karthikesalingam, A., Suleyman, M., Corrado, G., & King, D. (2019) · BMC Medicine · doi:10.1186/s12916-019-1426-2 · Cited by 3,136 · see citing works
Scientific discovery in the age of artificial intelligence.
Wang, H., Fu, T., Du, Y., Gao, W., Huang, K., Liu, Z., Chandak, P., Liu, S., Van Katwyk, P., Deac, A., et al. (2023) · Nature · doi:10.1038/s41586-023-06221-2 · Cited by 1,823 · see citing works
Liu, X., Cruz Rivera, S., Moher, D., Calvert, M. J., Denniston, A. K., The SPIRIT-AI and CONSORT-AI Working Group, SPIRIT-AI and CONSORT-AI Steering Group, Chan, A.-W., Darzi, A., Holmes, C., et al. (2020) · Nature Medicine · doi:10.1038/s41591-020-1034-x · Cited by 1,421 · see citing works
Self-citationTransformers in medical imaging: A survey
Shamshad, F., Khan, S., Zamir, S. W., Khan, M. H., Hayat, M., Khan, F. S., & Fu, H. (2023) · Medical Image Analysis · doi:10.1016/j.media.2023.102802 · Cited by 1,412 · see citing works
Ethical and legal challenges of artificial intelligence-driven healthcare
Gerke, S., Minssen, T., & Cohen, G. (2020) · Artificial Intelligence in Healthcare · doi:10.1016/b978-0-12-818438-7.00012-5 · Cited by 1,170 · see citing works
Human-computer collaboration for skin cancer recognition
Tschandl, P., Rinner, C., Apalla, Z., Argenziano, G., Codella, N., Halpern, A., Janda, M., Lallas, A., Longo, C., Malvehy, J., et al. (2020) · Nature Medicine · doi:10.1038/s41591-020-0942-0 · Cited by 1,024 · see citing works
Deep Learning for Cardiac Image Segmentation: A Review
Chen, C., Qin, C., Qiu, H., Tarroni, G., Duan, J., Bai, W., & Rueckert, D. (2020) · Frontiers in Cardiovascular Medicine · doi:10.3389/fcvm.2020.00025 · Cited by 915 · see citing works
Swarm Learning for decentralized and confidential clinical machine learning
Warnat-Herresthal, S., Schultze, H., Shastry, K. L., Manamohan, S., Mukherjee, S., Garg, V., Sarveswara, R., Händler, K., Pickkers, P., Aziz, N. A., et al. (2021) · Nature · doi:10.1038/s41586-021-03583-3 · Cited by 884 · see citing works
Deep neural network models for computational histopathology: A survey
Srinidhi, C. L., Ciga, O., & Martel, A. L. (2021) · Medical Image Analysis · doi:10.1016/j.media.2020.101813 · Cited by 749 · see citing works
Cruz Rivera, S., Liu, X., Chan, A.-W., Denniston, A. K., Calvert, M. J., The SPIRIT-AI and CONSORT-AI Working Group, SPIRIT-AI and CONSORT-AI Steering Group, Darzi, A., Holmes, C., Yau, C., et al. (2020) · Nature Medicine · doi:10.1038/s41591-020-1037-7 · Cited by 748 · see citing works
“For example, changes to medical imaging that are invis-ible, or appear random, to the human eye may change the likelihood of the resultant diagnostic output entirely 47,48 .”
Self-citationSynthetic data in machine learning for medicine and healthcare
Chen, R. J., Lu, M. Y., Chen, T. Y., Williamson, D. F. K., & Mahmood, F. (2021) · Nature Biomedical Engineering · doi:10.1038/s41551-021-00751-8 · Cited by 728 · see citing works
AI applications to medical images: From machine learning to deep learning
Castiglioni, I., Rundo, L., Codari, M., Leo, G. D., Salvatore, C., Interlenghi, M., Gallivanone, F., Cozzi, A., D’Amico, N. C., & Sardanelli, F. (2021) · Physica Medica · doi:10.1016/j.ejmp.2021.02.006 · Cited by 737 · see citing works
Liu, X., Rivera, S. C., Moher, D., Calvert, M. J., & Denniston, A. K. (2020) · BMJ · doi:10.1136/bmj.m3164 · Cited by 702 · see citing works
Introducing artificial intelligence training in medical education
Paranjape, K., Schinkel, M., Nannan Panday, R., Car, J., & Nanayakkara, P. (2019) · JMIR Medical Education · doi:10.2196/16048 · Cited by 634 · see citing works
Lekadir, K., Frangi, A. F., Porras, A. R., Glocker, B., Cintas, C., Langlotz, C. P., Weicken, E., Asselbergs, F. W., Prior, F., Collins, G. S., et al. (2025) · BMJ · doi:10.1136/bmj-2024-081554 · Cited by 957 · see citing works
“60”
Liu, X., Cruz Rivera, S., Moher, D., Calvert, M. J., Denniston, A. K., Ashrafian, H., Beam, A. L., Chan, A.-W., Collins, G. S., Deeks, A. D. J., et al. (2020) · The Lancet Digital Health · doi:10.1016/s2589-7500(20)30218-1 · Cited by 555 · see citing works
Self-citationUnderstanding adversarial attacks on deep learning based medical image analysis systems
Ma, X., Niu, Y., Gu, L., Wang, Y., Zhao, Y., Bailey, J., & Lu, F. (2021) · Pattern Recognition · doi:10.1016/j.patcog.2020.107332 · Cited by 553 · see citing works
Machine learning in healthcare
Habehh, H., & Gohel, S. (2021) · Current Genomics · doi:10.2174/1389202922666210705124359 · Cited by 544 · see citing works
Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks
Liu, Y., Ma, X., Bailey, J., & Lu, F. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-58607-2_11 · Cited by 531 · see citing works
Second opinion needed: Communicating uncertainty in medical machine learning
Kompa, B., Snoek, J., & Beam, A. L. (2021) · npj Digital Medicine · doi:10.1038/s41746-020-00367-3 · Cited by 514 · see citing works
Self-citationEthics and governance of trustworthy medical artificial intelligence
Zhang, J., & Zhang, Z.-M. (2023) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-023-02103-9 · Cited by 507 · see citing works
“Whereas the image with superimposed noise was difficult for the human eye to distinguish compared to the original image, the benign diagnosis was incorrectly identified as malignant when the original image was rotated adversarially [57].”
BackgroundCruz Rivera, S., Liu, X., Chan, A.-W., Denniston, A. K., Calvert, M. J., Ashrafian, H., Beam, A. L., Collins, G. S., Darzi, A., Deeks, J. J., et al. (2020) · The Lancet Digital Health · doi:10.1016/s2589-7500(20)30219-3 · Cited by 486 · see citing works
Self-citationThe future of early cancer detection
Fitzgerald, R. C., Antoniou, A. C., Fruk, L., & Rosenfeld, N. (2022) · Nature Medicine · doi:10.1038/s41591-022-01746-x · Cited by 475 · see citing works
Rivera, S. C., Liu, X., Chan, A.-W., Denniston, A. K., & Calvert, M. J. (2020) · BMJ · doi:10.1136/bmj.m3210 · Cited by 463 · see citing works
Identifying Ethical Considerations for Machine Learning Healthcare Applications
Char, D. S., Abràmoff, M. D., & Feudtner, C. (2020) · The American Journal of Bioethics · doi:10.1080/15265161.2020.1819469 · Cited by 415 · see citing works
Machine Learning for Predicting Epileptic Seizures Using EEG Signals: A Review
Rasheed, K., Qayyum, A., Qadir, J., Sivathamboo, S., Kwan, P., Kuhlmann, L., O'Brien, T. J., & Razi, A. (2020) · IEEE Reviews in Biomedical Engineering · doi:10.1109/rbme.2020.3008792 · Cited by 417 · see citing works
AI in Health: State of the Art, Challenges, and Future Directions
Wang, F., & Preininger, A. (2019) · Yearbook of Medical Informatics · doi:10.1055/s-0039-1677908 · Cited by 398 · see citing works
Explainable, trustworthy, and ethical machine learning for healthcare: A survey
Rasheed, K., Qayyum, A., Ghaly, M., Al-Fuqaha, A., Razi, A., & Qadir, J. (2022) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2022.106043 · Cited by 372 · see citing works
Deep learning for cardiac image segmentation: A review
Chen, C., Qin, C., Qiu, H., Tarroni, G., Duan, J., Bai, W., & Rueckert, D. (2019) · City Research Online (City University London) · Cited by 358 · see citing works
Cutillo, C. M., Sharma, K. R., Foschini, L., Kundu, S., Mackintosh, M., Mandl, K. D., MI in Healthcare Workshop Working Group, Beck, T., Collier, E., Colvis, C., et al. (2020) · npj Digital Medicine · doi:10.1038/s41746-020-0254-2 · Cited by 337 · see citing works
Collaborative Federated Learning for Healthcare: Multi-Modal COVID-19 Diagnosis at the Edge
Qayyum, A., Ahmad, K., Ahsan, M. A., Al-Fuqaha, A., & Qadir, J. (2022) · IEEE Open Journal of the Computer Society · doi:10.1109/ojcs.2022.3206407 · Cited by 345 · see citing works
Why deep-learning AIs are so easy to fool
Heaven, D. (2019) · Nature · doi:10.1038/d41586-019-03013-5 · Cited by 342 · see citing works
Shaping the future of healthcare: ethical clinical challenges and pathways to trustworthy AI
Goktas, P., & Grzybowski, A. (2025) · Journal of Clinical Medicine · doi:10.3390/jcm14051605 · Cited by 336 · see citing works
Ahmad, K., Maabreh, M., Ghaly, M., Khan, K., Qadir, J., & Al-Fuqaha, A. (2022) · Computer Science Review · doi:10.1016/j.cosrev.2021.100452 · Cited by 291 · see citing works
Diao, J. A., Wang, J. K., Chui, W. F., Mountain, V., Gullapally, S. C., Srinivasan, R., Mitchell, R. N., Glass, B., Hoffman, S., Rao, S. K., et al. (2021) · Nature Communications · doi:10.1038/s41467-021-21896-9 · Cited by 281 · see citing works
Trustworthy ai: A computational perspective
Liu, H., Wang, Y., Fan, W., Liu, X., Li, Y., Jain, S., Liu, Y., Jain, A., & Tang, J. (2023) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3546872 · Cited by 261 · see citing works
Yu, P., Xu, H., Hu, X., & Deng, C. (2023) · Healthcare · doi:10.3390/healthcare11202776 · Cited by 267 · see citing works
Singh, R. P., Hom, G. L., Abramoff, M. D., Campbell, J. P., Chiang, M. F., & on behalf of the AAO Task Force on Artificial Intelligence (2020) · Translational Vision Science & Technology · doi:10.1167/tvst.9.2.45 · Cited by 259 · see citing works
Clean-Label Backdoor Attacks on Video Recognition Models
Zhao, S., Ma, X., Zheng, X., Bailey, J., Chen, J., & Jiang, Y. (2020) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr42600.2020.01445 · Cited by 247 · see citing works
Characteristics of publicly available skin cancer image datasets: a systematic review
Wen, D., Khan, S. M., Ji Xu, A., Ibrahim, H., Smith, L., Caballero, J., Zepeda, L., de Blas Perez, C., Denniston, A. K., Liu, X., et al. (2022) · The Lancet Digital Health · doi:10.1016/s2589-7500(21)00252-1 · Cited by 243 · see citing works
Artificial Intelligence and Orthopaedics
Myers, T. G., Ramkumar, P. N., Ricciardi, B. F., Urish, K. L., Kipper, J., & Ketonis, C. (2020) · Journal of Bone and Joint Surgery · doi:10.2106/jbjs.19.01128 · Cited by 243 · see citing works
Large language model (ChatGPT) as a support tool for breast tumor board
Sorin, V., Klang, E., Sklair‐Levy, M., Cohen, I., Zippel, D. B., Lahat, N. B., Konen, E., & Barash, Y. (2023) · npj Breast Cancer · doi:10.1038/s41523-023-00557-8 · Cited by 216 · see citing works
Larson, D. B., Harvey, H., Rubin, D. L., Irani, N., Tse, J. R., & Langlotz, C. P. (2021) · Journal of the American College of Radiology · doi:10.1016/j.jacr.2020.09.060 · Cited by 198 · see citing works
Precision medicine in stroke: towards personalized outcome predictions using artificial intelligence
Bonkhoff, A. K., & Grefkes, C. (2021) · Brain · doi:10.1093/brain/awab439 · Cited by 195 · see citing works
Adversarial Attacks and Defenses for Deep-Learning-Based Unmanned Aerial Vehicles
Tian, J., Wang, B., Guo, R., Wang, Z., Cao, K., & Wang, X. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3111024 · Cited by 192 · see citing works
Are Labels Required for Improving Adversarial Robustness?Preprint
Uesato, J., Alayrac, J.-B., Huang, P.-S., Stanforth, R., Fawzi, A., & Kohli, P. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.13725 · Cited by 207 · see citing works
An introduction to deep learning in medical physics: advantages, potential, and challenges
Shen, C., Nguyen, D. T. D., Zhou, Z., Jiang, S. B., Dong, B., & Jia, X. (2020) · Physics in Medicine and Biology · doi:10.1088/1361-6560/ab6f51 · Cited by 187 · see citing works
Ethical and Legal Challenges of Artificial Intelligence-Driven Healthcare
Gerke, S., Minssen, T., & Cohen, I. G. (2020) · doi:10.2139/ssrn.3570129 · Cited by 177 · see citing works
Speech Technology for Healthcare: Opportunities, Challenges, and State of the Art
Latif, S., Qadir, J., Qayyum, A., Usama, M., & Younis, M. S. (2020) · IEEE Reviews in Biomedical Engineering · doi:10.1109/rbme.2020.3006860 · Cited by 177 · see citing works
Rasool, R. U., Ahmad, H. F., Rafique, W., Qayyum, A., & Qadir, J. (2022) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2022.103332 · Cited by 177 · see citing works
Next-generation agentic AI for transforming healthcare
Karunanayake, N. (2025) · Informatics and Health · doi:10.1016/j.infoh.2025.03.001 · Cited by 165 · see citing works
Panigutti, C., Perotti, A., & Pedreschi, D. (2020) · ACM Conference on Fairness, Accountability, and Transparency (FAccT) · doi:10.1145/3351095.3372855 · Cited by 162 · see citing works
GNNGuard: Defending Graph Neural Networks against Adversarial AttacksPreprint
Zhang, X. D., & Žitnik, M. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.08149 · Cited by 194 · see citing works
Universal adversarial attacks on deep neural networks for medical image classification
Hirano, H., Minagi, A., & Takemoto, K. (2021) · BMC Medical Imaging · doi:10.1186/s12880-020-00530-y · Cited by 160 · see citing works
Adversarial Attacks and Defenses in Deep Learning: From a Perspective of Cybersecurity
Zhou, S., Liu, C., Ye, D., Zhu, T., Zhou, W., & Yu, P. S. (2022) · ACM Computing Surveys · doi:10.1145/3547330 · Cited by 178 · see citing works
Operationalising ethics in artificial intelligence for healthcare: a framework for AI developers
Solanki, P., Grundy, J., & Hussain, W. (2023) · AI and Ethics · doi:10.1007/s43681-022-00195-z · Cited by 157 · see citing works
Explainable Artificial Intelligence for Neuroscience: Behavioral Neurostimulation
Fellous, J., Sapiro, G., Rossi, A. F., Mayberg, H., & Ferrante, M. (2019) · Frontiers in Neuroscience · doi:10.3389/fnins.2019.01346 · Cited by 156 · see citing works
Quantum adversarial machine learning
Lu, S., Duan, L.-M., & Deng, D.-L. (2020) · Physical Review Research · doi:10.1103/physrevresearch.2.033212 · Cited by 162 · see citing works
Performance vs. competence in human–machine comparisons
Firestone, C. (2020) · Proceedings of the National Academy of Sciences · doi:10.1073/pnas.1905334117 · Cited by 150 · see citing works
Solving Inverse Problems With Deep Neural Networks – Robustness Included?
Genzel, M., Macdonald, J., & März, M. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3148324 · Cited by 156 · see citing works
Wing, J. M. (2021) · Communications of the ACM · doi:10.1145/3448248 · Cited by 149 · see citing works
The Rhetoric and Reality of Anthropomorphism in Artificial Intelligence
Watson, D. (2019) · Minds and Machines · doi:10.1007/s11023-019-09506-6 · Cited by 148 · see citing works
Abràmoff, M. D., Tobey, D., & Char, D. S. (2020) · American Journal of Ophthalmology · doi:10.1016/j.ajo.2020.02.022 · Cited by 140 · see citing works
Clinician checklist for assessing suitability of machine learning applications in healthcare
Scott, I. A., Carter, S. M., & Coiera, E. W. (2021) · BMJ Health & Care Informatics · doi:10.1136/bmjhci-2020-100251 · Cited by 140 · see citing works
Waqas, A., Bui, M. M., Glassy, E. F., Naqa, I. E., Borkowski, P., Borkowski, A., & Rasool, G. (2023) · Laboratory Investigation · doi:10.1016/j.labinv.2023.100255 · Cited by 149 · see citing works
Deep learning models for electrocardiograms are susceptible to adversarial attack
Han, X., Hu, Y., Foschini, L., Chinitz, L. A., Jankelson, L., & Ranganath, R. (2020) · Nature Medicine · doi:10.1038/s41591-020-0791-x · Cited by 144 · see citing works
Artificial intelligence and crime: A primer for criminologists
Hayward, K., & Maas, M. M. (2020) · Crime Media Culture An International Journal · doi:10.1177/1741659020917434 · Cited by 141 · see citing works
The Next Frontier: AI We Can Really Trust
Holzinger, A. (2021) · PKDD/ECML Workshops · doi:10.1007/978-3-030-93736-2_33 · Cited by 114 · see citing works
Interpretability-Based Multimodal Convolutional Neural Networks for Skin Lesion Diagnosis
Wang, S., Yin, Y., Wang, D., Wang, Y., & Jin, Y. (2021) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2021.3069920 · Cited by 139 · see citing works
Combalia, M., Codella, N., Rotemberg, V. M., Carrera, C., Dusza, S. W., Gutman, D. A., Helba, B., Kittler, H., Kurtansky, N. R., Liopyris, K., et al. (2022) · The Lancet Digital Health · doi:10.1016/s2589-7500(22)00021-8 · Cited by 144 · see citing works
The explainability paradox: Challenges for xAI in digital pathology
Evans, T., Retzlaff, C. O., Geißler, C., Kargl, M., Plass, M., Müller, H., Kiehl, T.-R., Zerbe, N., & Holzinger, A. (2022) · Future Generation Computer Systems · doi:10.1016/j.future.2022.03.009 · Cited by 135 · see citing works
Momtazmanesh, S., Nowroozi, A. A., & Rezaei, N. (2022) · Rheumatology and Therapy · doi:10.1007/s40744-022-00475-4 · Cited by 138 · see citing works
Black Box Warning: Large Language Models and the Future of Infectious Diseases Consultation
Schwartz, I. S., Link, K. E., Daneshjou, R., & Cortés-Penfield, N. (2024) · Clinical Infectious Diseases · doi:10.1093/cid/ciad633 · Cited by 131 · see citing works
Vision transformer architecture and applications in digital health: a tutorial and survey
Al-hammuri, K., Gebali, F., Kanan, A., & Chelvan, I. T. (2023) · Visual Computing for Industry, Biomedicine, and Art · doi:10.1186/s42492-023-00140-9 · Cited by 126 · see citing works
Lead federated neuromorphic learning for wireless edge artificial intelligence
Yang, H., Lam, K.-Y., Xiao, L., Xiong, Z., Hu, H., Niyato, D., & Vincent Poor, H. (2022) · Nature Communications · doi:10.1038/s41467-022-32020-w · Cited by 127 · see citing works
Adversarial attack vulnerability of medical image analysis systems: Unexplored factors
Bortsova, G., González-Gonzalo, C., Wetstein, S. C., Dubost, F., Katramados, I., Hogeweg, L., Liefers, B. J., van Ginneken, B., Pluim, J. P. W., Veta, M., et al. (2021) · Medical Image Analysis · doi:10.1016/j.media.2021.102141 · Cited by 128 · see citing works
Colbrook, M. J., Antun, V., & Hansen, A. C. (2022) · Proceedings of the National Academy of Sciences · doi:10.1073/pnas.2107151119 · Cited by 126 · see citing works
Algorithms on regulatory lockdown in medicine
Babic, B., Gerke, S., Evgeniou, T., & Cohen, I. G. (2019) · Science · doi:10.1126/science.aay9547 · Cited by 123 · see citing works
Multimodal generative AI for medical image interpretation
Rao, V. M., Hla, M., Moor, M., Adithan, S., Kwak, S., Topol, E. J., & Rajpurkar, P. (2025) · Nature · doi:10.1038/s41586-025-08675-y · Cited by 128 · see citing works
Future Smart Connected Communities to Fight COVID-19 Outbreak
Gupta, D., Bhatt, S., Gupta, M., & Tosun, A. Ş. (2020) · Internet of Things · doi:10.1016/j.iot.2020.100342 · Cited by 123 · see citing works
How Do Machines Learn? Artificial Intelligence as a New Era in Medicine
Koteluk, O., Wartecki, A., Mazurek, S., Kołodziejczak, I., & Mackiewicz, A. A. (2021) · Journal of Personalized Medicine · doi:10.3390/jpm11010032 · Cited by 124 · see citing works
Translational Research in the Era of Precision Medicine: Where We Are and Where We Will Go
Maria, R. D., Sante, G. D., Piro, G., Carbone, C., Tortora, G., Boldrini, L., Pietragalla, A., Daniele, G., Tredicine, M., Cesario, A., et al. (2021) · Journal of Personalized Medicine · doi:10.3390/jpm11030216 · Cited by 119 · see citing works
Current challenges of implementing artificial intelligence in medical imaging
Saw, S. N., & Ng, K. H. (2022) · Physica Medica · doi:10.1016/j.ejmp.2022.06.003 · Cited by 117 · see citing works
Adversarial attacks and adversarial robustness in computational pathology
Laleh, N. G., Truhn, D., Veldhuizen, G. P., Han, T., van Treeck, M., Buelow, R. D., Langer, R., Dislich, B., Boor, P., Schulz, V., et al. (2022) · Nature Communications · doi:10.1038/s41467-022-33266-0 · Cited by 115 · see citing works
Adversarial Attacks to Machine Learning-Based Smart Healthcare Systems
Newaz, A. I., Haque, N. I., Sikder, A. K., Rahman, M. A., & Uluagac, A. S. (2020) · Globecom · doi:10.1109/globecom42002.2020.9322472 · Cited by 114 · see citing works
Solving electrical impedance tomography with deep learning
Fan, Y., & Lexing Ying, B. (2019) · Journal of Computational Physics · doi:10.1016/j.jcp.2019.109119 · Cited by 114 · see citing works
Clinical implementation of AI technologies will require interpretable AI models
Jia, X., Ren, L., & Cai, J. (2019) · Medical Physics · doi:10.1002/mp.13891 · Cited by 113 · see citing works
Experimental quantum adversarial learning with programmable superconducting qubits
Ren, W., Li, W., Xu, S., Wang, K., Jiang, W., Jin, F., Zhu, X., Chen, J., Song, Z., Zhang, P., et al. (2022) · Nature Computational Science · doi:10.1038/s43588-022-00351-9 · Cited by 111 · see citing works
Generating synthetic data for medical imaging
Koetzier, L. R., Wu, J., Mastrodicasa, D., Lutz, A., Chung, M., Koszek, W. A., Pratap, J., Chaudhari, A. S., Rajpurkar, P., Lungren, M. P., et al. (2024) · Radiology · doi:10.1148/radiol.232471 · Cited by 111 · see citing works
Privacy and Security of Big Data in AI Systems: A Research and Standards Perspective
Dilmaghani, S., Brust, M. R., Danoy, G., Cassagnes, N., Pecero, J., & Bouvry, P. (2019) · 2019 IEEE International Conference on Big Data (Big Data) · doi:10.1109/bigdata47090.2019.9006283 · Cited by 111 · see citing works
Responsibility beyond design: Physicians’ requirements for ethical medical AI
Sand, M., Durán, J. M., & Jongsma, K. R. (2021) · Bioethics · doi:10.1111/bioe.12887 · Cited by 109 · see citing works
Artificial Intelligence and Surgery: Ethical Dilemmas and Open Issues
Cobianchi, L., Verde, J. M., Loftus, T. J., Piccolo, D., Mas, F. D., Mascagni, P., Vazquez, A. G., Ansaloni, L., Marseglia, G. R., Massaro, M., et al. (2022) · Journal of the American College of Surgeons · doi:10.1097/xcs.0000000000000242 · Cited by 108 · see citing works
Beyond generalization: a theory of robustness in machine learning
Freiesleben, T., & Grote, T. (2023) · Synthese · doi:10.1007/s11229-023-04334-9 · Cited by 106 · see citing works
SafetyMed: A Novel IoMT Intrusion Detection System Using CNN-LSTM Hybridization
Faruqui, N., Yousuf, M. A., Whaiduzzaman, M., Azad, A., Alyami, S. A., Lió, P., Kabir, M. A., & Moni, M. A. (2023) · Electronics · doi:10.3390/electronics12173541 · Cited by 105 · see citing works
Noninterpretive Uses of Artificial Intelligence in Radiology
Richardson, M. L., Garwood, E. R., Lee, Y. Z., Li, M., Lo, H. S., Nagaraju, A., Nguyen, X. V., Probyn, L. J., Rajiah, P. S., Sin, J. M., et al. (2020) · Academic Radiology · doi:10.1016/j.acra.2020.01.012 · Cited by 105 · see citing works
Quantum adversarial machine learning
Lu, S., Duan, L., & Deng, D. (2020) · MPG.PuRe (Max Planck Society) · Cited by 105 · see citing works
Artificial Intelligence: reshaping the practice of radiological sciences in the 21st century
Naqa, I. E., Haider, M. A., Giger, M. L., & Haken, R. K. T. (2020) · British Journal of Radiology · doi:10.1259/bjr.20190855 · Cited by 101 · see citing works
Anatomy-aided deep learning for medical image segmentation: a review
Liu, L., Wolterink, J. M., Brüne, C., & Veldhuis, R. N. J. (2021) · Physics in Medicine and Biology · doi:10.1088/1361-6560/abfbf4 · Cited by 100 · see citing works
Evaluating pointwise reliability of machine learning prediction
Nicora, G., Rios, M., Abu–Hanna, A., & Bellazzi, R. (2022) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2022.103996 · Cited by 98 · see citing works
What Should ChatGPT Mean for Bioethics?
Cohen, I. G. (2023) · The American Journal of Bioethics · doi:10.1080/15265161.2023.2233357 · Cited by 95 · see citing works
- Authors
- Finlayson, S. G., Bowers, J. D., Ito, J., Zittrain, J. L., Beam, A. L., & Kohane, I. S.
- Affiliations
- Harvard University (US)
- MIT Media Lab (US)
- Venue
- Science
- Published
- 2019-03-22
- Volume
- 363
- Issue
- 6433
- Pages
- 1287-1289
- ISSN
- 0036-8075 (ISSN-L)
- 1095-9203
- PMC
- PMC7657648
- OpenAlex
- W2924551358
- Semantic Scholar
- e718828e8f776d9f80daa3f8e0af6895f5d34c44
- Cited by
- 1,088
- References
- 10
- Citations by year
- 2026: 162 · 2025: 155 · 2024: 123 · 2023: 153 · 2022: 178 · 2021: 166 · 2020: 107 · 2019: 43 · 2012: 1
- FWCI
- 56.32
- Type
- journal article
- Language
- en
- Open access
- green
- www.ncbi.nlm.nih.gov
- Locations
- Science (publishedVersion)
- PubMed (publishedVersion)
- PubMed Central (acceptedVersion)
- Digital Access to Scholarship at Harvard (DASH) (Harvard University) (submittedVersion)
- Funders
- National Institute of General Medical Sciences (T32GM007753)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Health Sciences › Medicine › Health Informatics › Artificial Intelligence in Healthcare and Education
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- adversarial attacks, machine learning in medicine, model vulnerability, robustness, clinical decision support, cybersecurity in healthcare
- MeSH terms
- Machine Learning, Fraud, Humans, Insurance Claim Review
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
