Data Poisoning Attack Defense and Evolutionary Domain Adaptation for Federated Medical Image Segmentation
Data Poisoning Attack Defense and Evolutionary Domain Adaptation for Federated Medical Image Segmentation
Min Hyuk Kim, Seok Bong Yoo
Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence
Main Track. Pages 1305-1313.
https://doi.org/10.24963/ijcai.2025/146
Federated learning has significant demonstrated potential in medical image segmentation to protect data privacy by retaining local data. However, its application is still hindered by two critical challenges: 1) the retained data poisoning attacks that severely compromise the accuracy of the global segmentation model and 2) domain gaps among clients, undermining its generalizability. To address these issues, we propose AdaShield-FL, a data poisoning attack defense and evolutionary domain adaptation for federated medical image segmentation. AdaShield-FL incorporates a disentangled reconstruction and segmentation module that purifies data in the k-space domain to mitigate the effects of adversarial attacks iteratively. Moreover, it introduces a data poisoning attack detection mechanism that analyzes abnormal patterns in training loss sequences to identify malicious clients. This method also aligns local and global covariance matrices via evolutionary optimization to minimize the domain gap efficiently. The experimental validation on cardiac magnetic resonance imaging datasets demonstrates the robustness and superior performance of AdaShield-FL compared with other federated learning methods.
Keywords:
Computer Vision: CV: Biomedical image analysis
Computer Vision: CV: Adversarial learning, adversarial attack and defense methods
Computer Vision: CV: Segmentation, grouping and shape analysis
