Adversarial robustness of deep learning-based thyroid nodule segmentation in ultrasound
Author summary Artificial intelligence systems are increasingly used to assist with medical image analysis, including thyroid nodule segmentation on ultrasound. These systems are typically evaluated using standard test images, yet subtle image changes can alter model behaviour. We examined how a deep learning model for thyroid nodule segmentation responds to deliberate, visually plausible image perturbations introduced under conditions where the attacker cannot access the model’s internal workings. Reference seg…
Simple inference-time denoising restored about 36% of lost segmentation accuracy (Dice +0.10) against the spatial-noise attack, with negligible cost on clean images.
The study used one U-Net model and one single-institution dataset, with 31 test nodules, non-adaptive defenses, a fixed 500-query budget and no reader study of imperceptibility, so generalizability and clinical significance remain unclear.
Evidence
- JournalismPLOS (Public Library of Science)2026-11-04
How should this claim be treated?
Truvace Impact Record TRV-2026-2375, v1: “Adversarial robustness of deep learning-based thyroid nodule segmentation in ultrasound.” Truvace, 2026-11-05. /record/TRV-2026-2375 (accessed at citation time). sha256 3b2761c26bd87e95…
Calibration history
Every change to this record since certification, in the open. None yet — the reading has held since it entered the record.
Certified into the record
How to verify without trusting this page
Fetch the canonical text of any version from /api/record/TRV-2026-2375 and hash it yourself — for example shasum -a 256 on the saved canonical field. The result must equal content_hash, and each version’s text ends with prev:followed by the prior version’s hash (version 1 chains to 64 zeros). If a single character of any version had been altered since certification, the chain would not reproduce.
ace