Some Investigations on Robustness of Deep Learning in Limited Angle Tomography

In computed tomography, image reconstruction from an insufficient angular range of projection data is called limited angle tomography. Due to missing data, reconstructed images suffer from artifacts, which cause boundary distortion, edge blurring, and intensity biases. Recently, deep learning methods have been applied very successfully to this problem in simulation studies. However, the robustness of neural networks for clinical applications is still a concern. It is reported that most neural networks are vulnerable to adversarial examples. In this paper, we aim to investigate whether some perturbations or noise will mislead a neural network to fail to detect an existing lesion. Our experiments demonstrate that the trained neural network, specifically the U-Net, is sensitive to Poisson noise. While the observed images appear artifact-free, anatomical structures may be located at wrong positions, e.g. the skin shifted by up to 1 cm. This kind of behavior can be reduced by retraining on data with simulated Poisson noise. However, we demonstrate that the retrained U-Net model is still susceptible to adversarial examples. We conclude the paper with suggestions towards robust deep-learning-based reconstruction.

[1]  Jong Chul Ye,et al.  Multi-Scale Wavelet Domain Residual Learning for Limited-Angle CT Reconstruction , 2017, ArXiv.

[2]  Joachim Hornegger,et al.  Restoration of missing data in limited angle tomography based on Helgason–Ludwig consistency conditions , 2017 .

[3]  Mathias Unberath,et al.  Deep Learning Computed Tomography: Learning Projection-Domain Weights From Image Domain in Limited Angle Problems , 2018, IEEE Transactions on Medical Imaging.

[4]  Andreas K. Maier,et al.  Precision Learning: Towards Use of Known Operators in Neural Networks , 2018, 2018 24th International Conference on Pattern Recognition (ICPR).

[5]  Andreas K. Maier,et al.  A Deep Learning Architecture for Limited-Angle Computed Tomography Reconstruction , 2017, Bildverarbeitung für die Medizin.

[6]  Dawn Song,et al.  Robust Physical-World Attacks on Deep Learning Models , 2017, 1707.08945.

[7]  Joan Bruna,et al.  Intriguing properties of neural networks , 2013, ICLR.

[8]  Vincent Dumoulin,et al.  Deconvolution and Checkerboard Artifacts , 2016 .

[9]  Jonathon Shlens,et al.  Explaining and Harnessing Adversarial Examples , 2014, ICLR.

[10]  Xin Jin,et al.  A limited-angle CT reconstruction method based on anisotropic TV minimization , 2013, Physics in medicine and biology.

[11]  Samy Bengio,et al.  Adversarial examples in the physical world , 2016, ICLR.

[12]  Thomas Brox,et al.  U-Net: Convolutional Networks for Biomedical Image Segmentation , 2015, MICCAI.

[13]  Ming Jiang,et al.  An iterative algorithm for angle-limited three-dimensional image reconstruction , 2008 .

[14]  E. Sidky,et al.  Image reconstruction in circular cone-beam computed tomography by constrained, total-variation minimization , 2008, Physics in medicine and biology.

[15]  Pan He,et al.  Adversarial Examples: Attacks and Defenses for Deep Learning , 2017, IEEE Transactions on Neural Networks and Learning Systems.

[16]  Christo Lassiter,et al.  TV Or Not TV--That is the Question , 1996 .