Triggering hallucinations in model-based MRI reconstruction via adversarial perturbations
Organizations: Faculty of Engineering and Architecture/Computer Engineering, İzmir Bakırçay University, İzmir, Turkey · Department of Computer Science, Mathematics and Statistics, Ghent University, Ghent, Belgium · Data Mining and Modeling for Biomedicine Group, VIB Inflammation Research Center, Ghent, Belgium
Abstract
Generative models are increasingly used to improve the quality of medical imaging, such as reconstruction of magnetic resonance images and computed tomography. However, it is well-known that such models are susceptible to hallucinations: they may insert features into the reconstructed image which are not actually present in the original image. In a medical setting, such hallucinations may endanger patient health as they can lead to incorrect diagnoses. In this work, we aim to quantify the extent to which state-of-the-art generative models suffer from hallucinations in the context of magnetic resonance image reconstruction. Specifically, we craft adversarial perturbations resembling random noise for the unprocessed input images which induce hallucinations when reconstructed using a generative model. We perform this evaluation on the brain and knee images from the fastMRI data set using UNet and end-to-end VarNet architectures to reconstruct the images. Our results show that these models are highly susceptible to small perturbations and can be easily coaxed into producing hallucinations. This fragility may partially explain why hallucinations occur in the first place and suggests that a carefully constructed adversarial training routine may reduce their prevalence. Moreover, these hallucinations cannot be reliably detected using traditional image quality metrics. Novel approaches will therefore need to be developed to detect when hallucinations have occurred.
Figures & tables
| Model | Data | PSNR | NRMSE | SSIM |
|---|---|---|---|---|
| UNet | sc-knee | 55.60 (6.18) | 0.01 (0.01) | 1.00 (0.00) |
| 34.24 (10.10) | 0.17 (0.33) | 0.95 (0.10) | ||
| mc-knee | 50.35 (5.74) | 0.02 (0.01) | 1.00 (0.00) | |
| 28.48 (4.62) | 0.23 (0.13) | 0.82 (0.13) | ||
| mc-brain | 61.72 (4.58) | 0.01 (0.00) | 1.00 (0.00) | |
| 26.00 (11.06) | 0.76 (1.07) | 0.68 (0.34) |
Appendix figures & tables2 assets
Supplementary material from the paper’s appendix.
Appendix
Adversarial Examples
Adversarial examples are inputs crafted to cause machine-learning models to misclassify, misperceive, or generate unsafe outputs.
See all 76 papers