101. Short Communication: Localized Adversarial Artifacts for Compressed Sensing MRI.
- Author
-
Alaifari, Rima, Alberti, Giovanni S., and Gauksson, Tandri
- Subjects
COMPRESSED sensing ,ARTIFICIAL neural networks ,MAGNETIC resonance imaging ,DEEP learning ,INVERSE problems - Abstract
As interest in deep neural networks (DNNs) for image reconstruction tasks grows, their reliability has been called into question [V. Antun, F. Renna, C. Poon, B. Adcock, and A. C. Hansen, Proc. Natl. Acad. Sci. USA, 117 (2020), pp. 30088--30095; N. M. Gottschling, V. Antun, B. Adcock, and A. C. Hansen, The Troublesome Kernel: Why Deep Learning for Inverse Problems Is Typically Unstable, preprint, arXiv:2001.01258, 2020]. However, recent work has shown that, compared to total variation (TV) minimization, when appropriately regularized, DNNs show similar robustness to adversarial noise in terms of \ell 2-reconstruction error [M. Genzel, J. Macdonald, and M. M\"arz, IEEE Trans. Pattern Anal., 45 (2022), pp. 1119--1134]. We consider a different notion of robustness, using the \ell \infty - norm, and argue that localized reconstruction artifacts are a more relevant defect than the \ell 2-error. We create adversarial perturbations to undersampled magnetic resonance imaging measurements (in the frequency domain) which induce severe localized artifacts in the TV-regularized reconstruction. Notably, the same attack method is not as effective against DNN-based reconstruction. Finally, we show that this phenomenon is inherent to reconstruction methods for which exact recovery can be guaranteed, as with compressed sensing reconstructions with \ell 1- or TV-minimization. [ABSTRACT FROM AUTHOR]
- Published
- 2023
- Full Text
- View/download PDF