skip to main content
10.1145/3664647.3680806acmconferencesArticle/Chapter ViewAbstractPublication PagesmmConference Proceedingsconference-collections
research-article

HideMIA: Hidden Wavelet Mining for Privacy-Enhancing Medical Image Analysis

Published: 28 October 2024 Publication History

Abstract

Despite the advancements that deep learning has brought to medical image analysis (MIA), protecting the privacy of images remains a challenge. In a client-server MIA framework, especially after deployment, patients' private medical images can be easily captured by attackers from the transmission channel or malicious third-party servers. Previous MIA privacy-enhancing methods, whether based on distortion or homomorphic encryption, expose the fact that the transmitted images are medical images or transform the images into semantic-lacking noise. This tends to alert attackers, thereby falling into a cat-and-mouse game of theft and protection. To address this issue, we propose a covert MIA framework based on deep image hiding, namely HideMIA, which secures medical images by embedding them within natural cover images that are unlikely to raise suspicion. By directly analyzing the hidden medical images in the steganographic domain, HideMIA makes it difficult for attackers to notice the presence of medical images. Specifically, we propose the Mixture-of-Difference-Convolutions (MoDC) and Asymmetric Wavelet Attention (AsyWA) to enable HideMIA to conduct fine-grained analysis on each wavelet sub-band within the steganographic domain, mining features that are specific to medical images. Moreover, to reduce resource consumption on client devices, we design function-aligned knowledge distillation to obtain a lightweight hiding network, namely LightIH. Extensive experiments on six medical datasets demonstrate that our HideMIA achieves superior MIA performance and protective imperceptibility on medical image segmentation and classification.

References

[1]
Walid Al-Dhabyani, Mohammed Gomaa, Hussien Khaled, and Aly Fahmy. 2020. Dataset of breast ultrasound images. Data in Brief (2020).
[2]
T. Avudaiappan, R. Balasubramanian, S. Pandiyan, S. Murugan, S. Lakshmanaprabu, and K. Shankar. 2018. Medical Image Security Using Dual Encryption with Oppositional Based Optimization Algorithm. Journal of Medical Systems, Vol. 42 (2018), 1--11.
[3]
R. Bagai, Nafia Malik, and Murtuza Jadliwala. 2017. Measuring Anonymity of Pseudonymized Data After Probabilistic Background Attacks. IEEE Transactions on Information Forensics and Security, Vol. 12 (2017), 1156--1169.
[4]
Shumeet Baluja. 2017. Hiding images in plain sight: Deep steganography., Vol. 30 (2017).
[5]
Sema Candemir, Stefan Jaeger, Kannappan Palaniappan, Jonathan P. Musco, Rahul K. Singh, Zhiyun Xue, Alexandros Karargyris, Sameer K. Antani, George R. Thoma, and Clement J. McDonald. 2014. Lung Segmentation in Chest Radiographs Using Anatomical Atlases With Nonrigid Registration. IEEE Transactions on Medical Imaging (2014).
[6]
Chun-Fu (Richard) Chen, Quanfu Fan, and Rameswar Panda. 2021. CrossViT: Cross-Attention Multi-Scale Vision Transformer for Image Classification. In Proceedings of the IEEE International Conference on Computer Vision. 347--356.
[7]
Jieneng Chen, Yongyi Lu, Qihang Yu, Xiangde Luo, Ehsan Adeli, Yan Wang, Le Lu, Alan L. Yuille, and Yuyin Zhou. 2021. TransUNet: Transformers Make Strong Encoders for Medical Image Segmentation. arXiv, Vol. abs/2102.04306 (2021).
[8]
Xin Deng, Chao Gao, and Mai Xu. 2023. PIRNet: Privacy-Preserving Image Restoration Network via Wavelet Lifting. In Proceedings of the IEEE International Conference on Computer Vision. 22368--22377.
[9]
Alex Gaudio, Asim Smailagic, Christos Faloutsos, Shreshta Mohan, Elvin Johnson, Yuhao Liu, Pedro Costa, and Aurélio Campilho. 2023. DeepFixCX: Explainable privacy-preserving image compression for medical image analysis. WIREs Data Mining and Knowledge Discovery, Vol. 13, 4 (2023).
[10]
Jianping Gou, Baosheng Yu, Stephen J. Maybank, and Dacheng Tao. 2021. Knowledge Distillation: A Survey. International Journal of Computer Vision, Vol. 129, 6 (2021), 1789--1819.
[11]
Hao Guan, Pew-Thian Yap, Andrea Bozoki, and Mingxia Liu. 2024. Federated learning for medical image analysis: A survey. Pattern Recognition (2024), 110424.
[12]
Zhenyu Guan, Junpeng Jing, Xin Deng, Mai Xu, Lai Jiang, Zhou Zhang, and Yipeng Li. 2022. DeepMIH: Deep invertible network for multiple image hiding. IEEE Transactions on Pattern Analysis and Machine Intelligence, Vol. 45, 1 (2022), 372--390.
[13]
Jamie Hayes and George Danezis. 2017. Generating steganographic images via adversarial training. In Proceedings of the Neural Information Processing Systems. 1954--1963.
[14]
Zhongwei He, Wei Lu, Wei Sun, and Jiwu Huang. 2012. Digital image splicing detection based on Markov features in DCT and DWT domain. Pattern Recognition, Vol. 45, 12 (2012), 4292--4299.
[15]
Stefan Jaeger, Alexandros Karargyris, Sema Candemir, Les R. Folio, Jenifer Siegelman, Fiona M. Callaghan, Zhiyun Xue, Kannappan Palaniappan, Rahul K. Singh, Sameer K. Antani, George R. Thoma, Yi-Xiang J. Wang, Pu-Xuan Lu, and Clement J. McDonald. 2014. Automatic Tuberculosis Screening Using Chest Radiographs. IEEE Transactions on Medical Imaging (2014).
[16]
Debesh Jha, Pia H. Smedsrud, Michael A. Riegler, Pål Halvorsen, Thomas de Lange, Dag Johansen, and Håvard D. Johansen. 2020. Kvasir-SEG: A Segmented Polyp Dataset. In MMM.
[17]
Junpeng Jing, Xin Deng, Mai Xu, Jianyi Wang, and Zhenyu Guan. 2021. Hinet: Deep image hiding by invertible network. In Proceedings of the IEEE International Conference on Computer Vision. 4733--4742.
[18]
Georgios Kaissis, M. Makowski, D. Rückert, and R. Braren. 2020. Secure, privacy-preserving and federated machine learning in medical imaging. Nature Machine Intelligence, Vol. 2 (2020), 305--311.
[19]
Georgios Kaissis, Alexander Ziller, Jonathan Passerat-Palmbach, Théo Ryffel, Dmitrii Usynin, Andrew Trask, Ionésio Lima Jr, Jason Mancuso, Friederike Jungmann, Marc-Matthias Steinborn, et al. 2021. End-to-end privacy preserving deep learning on multi-institutional medical imaging. Nature Machine Intelligence, Vol. 3, 6 (2021), 473--484.
[20]
Bach Ngoc Kim, Jose Dolz, Christian Desrosiers, and Pierre-Marc Jodoin. 2021. Privacy Preserving for Medical Image Analysis via Non-Linear Deformation Proxy. In Proceedings of the British Machine Vision Conference. 375.
[21]
Bach Ngoc Kim, Jose Dolz, Pierre-Marc Jodoin, and Christian Desrosiers. 2021. Privacy-Net: An Adversarial Approach for Identity-Obfuscated Segmentation of Medical Images. IEEE Transactions on Medical Imaging, Vol. 40, 7 (2021), 1737--1749.
[22]
Bach Ngoc Kim, Jose Dolz, Pierre-Marc Jodoin, and Christian Desrosiers. 2023. Mixup-Privacy: A Simple yet Effective Approach for Privacy-Preserving Segmentation. In Proceedings of Information Processing In Medical Imaging, Vol. 13939. 717--729.
[23]
Chenqi Kong, Anwei Luo, Shiqi Wang, Haoliang Li, Anderson Rocha, and Alex C. Kot. 2023. Pixel-Inconsistency Modeling for Image Manipulation Localization. arXiv, Vol. abs/2310.00234 (2023).
[24]
Chenqi Kong, Anwei Luo, Song Xia, Yi Yu, Haoliang Li, and Alex C. Kot. 2024. MoE-FFD: Mixture of Experts for Generalized and Parameter-Efficient Face Forgery Detection. arXiv, Vol. abs/2404.08452 (2024).
[25]
Akshay Kumar, Rajneesh Rani, and Samayveer Singh. 2023. A survey of recent advances in image steganography. Secur. Priv., Vol. 6, 3 (2023).
[26]
Guobiao Li, Sheng Li, Zicong Luo, Zhenxing Qian, and Xinpeng Zhang. 2024. Purified and Unified Steganographic Network. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition.
[27]
Zhihui Li, Pengfei Xu, Xiaojun Chang, Luyao Yang, Yuanyuan Zhang, Lina Yao, and Xiaojiang Chen. 2023. When Object Detection Meets Knowledge Distillation: A Survey. IEEE Transactions on Pattern Analysis and Machine Intelligence, Vol. 45, 8 (2023), 10555--10579.
[28]
Tsung-Yi Lin, Michael Maire, Serge J. Belongie, James Hays, Pietro Perona, Deva Ramanan, Piotr Dollár, and C. Lawrence Zitnick. 2014. Microsoft COCO: Common Objects in Context. In Proceedings of the European Conference on Computer Vision, Vol. 8693. 740--755.
[29]
Xun Lin, Shuai Wang, Rizhao Cai, Yizhong Liu, Ying Fu, Zitong Yu, Wenzhong Tang, and Alex Kot. 2024. Suppress and Rebalance: Towards Generalized Multi-Modal Face Anti-Spoofing. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 211--221.
[30]
Xun Lin, Yi Yu, Song Xia, Jue Jiang, Haoran Wang, Zitong Yu, Yizhong Liu, Ying Fu, Shuai Wang, Wenzhong Tang, and Alex Kot. 2024. Safeguarding Medical Image Segmentation Datasets against Unauthorized Training via Contour- and Texture-Aware Perturbations. arXiv, Vol. 2403.14250 (2024).
[31]
G. Litjens, Thijs Kooi, B. Bejnordi, A. Setio, F. Ciompi, Mohsen Ghafoorian, J. Laak, B. Ginneken, and C. I. Sánchez. 2017. A survey on deep learning in medical image analysis. Medical Image Analysis, Vol. 42 (2017), 60--88.
[32]
Ajian Liu. 2024. CA-MoEiT: Generalizable Face Anti-spoofing via Dual Cross-Attention and Semi-fixed Mixture-of-Expert. International Journal of Computer Vision (2024), 1--14.
[33]
Dongyang Liu, Meina Kan, Shiguang Shan, and Xilin Chen. 2023. Function-Consistent Feature Distillation. In Proceedings of the International Conference on Learning Representations.
[34]
Dongyang Liu, Meina Kan, Shiguang Shan, and Xilin Chen. 2023. Function-Consistent Feature Distillation. In Proceedings of the International Conference on Learning Representations.
[35]
Huan Liu, Zichang Tan, Chuangchuang Tan, Yunchao Wei, Jingdong Wang, and Yao Zhao. 2024. Forgery-aware adaptive transformer for generalizable synthetic image detection. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 10770--10780.
[36]
Lianshan Liu, Lingzhuang Meng, Yanjun Peng, and Xiaoli Wang. 2021. A data hiding scheme based on U-Net and wavelet transform. Knowledge-Based Systems, Vol. 223 (2021), 107022.
[37]
Yizhong Liu, Zixiao Jia, Zixu Jiang, Xun Lin, Jianwei Liu, Qianhong Wu, and Willy Susilo. 2024. BFL-SA: Blockchain-based federated learning via enhanced secure aggregation. J. Syst. Archit., Vol. 152 (2024), 103163.
[38]
Shao-Ping Lu, Rong Wang, Tao Zhong, and Paul L. Rosin. 2021. Large-Capacity Image Steganography Based on Invertible Neural Networks. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 10816--10825.
[39]
Entao Luo, Md. Zakirul Alam Bhuiyan, Guojun Wang, M. A. Rahman, Jie Wu, and Mohammed Atiquzzaman. 2018. PrivacyProtector: Privacy-Protected Patient Data Collection in IoT-Based Healthcare Systems. IEEE Communications Magazine, Vol. 56 (2018), 163--168.
[40]
Ruohan Meng, Chenyu Yi, Yi Yu, Siyuan Yang, Bingquan Shen, and Alex C. Kot. 2024. Semantic Deep Hiding for Robust Unlearnable Examples. IEEE Transactions on Information Forensics and Security (2024).
[41]
Kai Packhäuser, Sebastian Gündel, Florian Thamm, Felix Denzinger, and Andreas K. Maier. 2023. Deep Learning-Based Anonymization of Chest Radiographs: A Utility-Preserving Measure for Patient Privacy. In Proceedings of International Conference on Medical Image Computing and Computer Assisted Intervention, Vol. 14222. 262--272.
[42]
Jasmine pemeena priyadarsini, Ketan Kotecha, G. Rajini, K. Hariharan, K. Raj, K. Ram, V. Indragandhi, V. Subramaniyaswamy, and Sharnil Pandya. 2023. Lung Diseases Detection Using Various Deep Learning Algorithms. Journal of Healthcare Engineering, Vol. 2023 (2023), 1--13.
[43]
Marina E. Plissiti, Panagiotis Dimitrakopoulos, Giorgos Sfikas, Christophoros Nikou, O. Krikoni, and Antonia Charchanti. 2018. Sipakmed: A New Dataset for Feature and Image Based Classification of Normal and Pathological Cervical Cells in Pap Smear Images. In Proceedings of the IEEE International Conference on Image Processing. 3144--3148.
[44]
Xiaolei Qu, Jiale Zhou, Jue Jiang, Wenhan Wang, Haoran Wang, Shuai Wang, Wenzhong Tang, and Xun Lin. 2024. EH-former: Regional easy-hard-aware transformer for breast lesion segmentation in ultrasound images. Information Fusion, Vol. 109 (2024), 102430.
[45]
Olaf Ronneberger, Philipp Fischer, and Thomas Brox. 2015. U-Net: Convolutional Networks for Biomedical Image Segmentation. In Proceedings of International Conference on Medical Image Computing and Computer Assisted Intervention.
[46]
Isaac Shiri, Behrooz Razeghi, Sohrab Ferdowsi, Yazdan Salimi, Deniz Gündüz, Douglas Teodoro, Slava Voloshynovskiy, and Habib Zaidi. 2024. PRIMIS: Privacy-preserving medical image sharing via deep sparsifying transform learning with obfuscation. Journal of Biomedical Informatics, Vol. 150 (2024), 104583.
[47]
Zhuo Su, Wenzhe Liu, Zitong Yu, Dewen Hu, Qing Liao, Qi Tian, Matti Pietikäinen, and Li Liu. 2021. Pixel Difference Networks for Efficient Edge Detection. In Proceedings of the IEEE International Conference on Computer Vision.
[48]
Fenghe Tang, Jianrui Ding, Lingtao Wang, Chunping Ning, and S. Kevin Zhou. 2024. Carnegie Mellon UniversityNeXt: An Efficient Medical Image Segmentation Network based on Large Kernel and Skip Fusion. In Proceedings of the IEEE International Symposium on Biomedical Imaging.
[49]
Ilya O. Tolstikhin, Neil Houlsby, Alexander Kolesnikov, Lucas Beyer, Xiaohua Zhai, Thomas Unterthiner, Jessica Yung, Andreas Steiner, Daniel Keysers, Jakob Uszkoreit, Mario Lucic, and Alexey Dosovitskiy. 2021. MLP-Mixer: An all-MLP Architecture for Vision. In Proceedings of the Neural Information Processing Systems. 24261--24272.
[50]
Chong Wang, Yi Yu, Lanqing Guo, and Bihan Wen. 2024. Benchmarking Adversarial Robustness of Image Shadow Removal with Shadow-Adaptive Attacks. In Proceedings of the IEEE International Conference on Acoustics, Speech, and Signal Processing. 13126--13130.
[51]
Song Xia, Yi Yu, Xudong Jiang, and Henghui Ding. 2024. Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing. In Proceedings of the International Conference on Learning Representations.
[52]
Mingqing Xiao, Shuxin Zheng, Chang Liu, Yaolong Wang, Di He, Guolin Ke, Jiang Bian, Zhouchen Lin, and Tie-Yan Liu. 2020. Invertible image rescaling. In Proceedings of the European Conference on Computer Vision. 126--144.
[53]
Yazhou Xing, Zian Qian, and Qifeng Chen. 2021. Invertible Image Signal Processing. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 6287--6296.
[54]
Jiancheng Yang, Rui Shi, Donglai Wei, Zequan Liu, Lin Zhao, Bilian Ke, Hanspeter Pfister, and Bingbing Ni. 2023. Medmnist v2-a large-scale lightweight benchmark for 2d and 3d biomedical image classification. Scientific Data, Vol. 10, 1 (2023), 41.
[55]
Ziyuan Yang, Yingyu Chen, Huijie Huangfu, Maosong Ran, Hui Wang, Xiaoxiao Li, and Yi Zhang. 2023. Dynamic Corrected Split Federated Learning With Homomorphic Encryption for U-Shaped Medical Image Networks. IEEE Journal of Biomedical and Health Informatics, Vol. 27, 12 (2023), 5946--5957.
[56]
Yi Yu, Yufei Wang, Song Xia, Wenhan Yang, Shijian Lu, Yap-Peng Tan, and Alex C Kot. 2024. Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders. In Proceedings of the International Conference on Machine Learning (Proceedings of Machine Learning Research).
[57]
Yi Yu, Yufei Wang, Wenhan Yang, Shijian Lu, Yap-Peng Tan, and Alex C. Kot. 2023. Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 12250--12259.
[58]
Yi Yu, Wenhan Yang, Yap-Peng Tan, and Alex C. Kot. 2022. Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyond. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 6013--6022.
[59]
Zitong Yu, Chenxu Zhao, Zezheng Wang, Yunxiao Qin, Zhuo Su, Xiaobai Li, Feng Zhou, and Guoying Zhao. 2020. Searching Central Difference Convolutional Networks for Face Anti-Spoofing. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition.
[60]
Peng Zhang, Li Su, Liang Li, Bing-Kun Bao, Pamela C. Cosman, Guorong Li, and Qingming Huang. 2019. Training Efficient Saliency Prediction Models with Knowledge Distillation. In ACM MM. 512--520.
[61]
Yanfeng Zhou, Jiaxing Huang, Chenlong Wang, Le Song, and Ge Yang. 2023. XNet: Wavelet-Based Low and High Frequency Fusion Networks for Fully- and Semi-Supervised Semantic Segmentation of Biomedical Images. In Proceedings of the IEEE International Conference on Computer Vision. 21028--21039.
[62]
Yanqi Zhou, Tao Lei, Hanxiao Liu, Nan Du, Yanping Huang, Vincent Y. Zhao, Andrew M. Dai, Zhifeng Chen, Quoc V. Le, and James Laudon. 2022. Mixture-of-Experts with Expert Choice Routing. In Proceedings of the Neural Information Processing Systems.
[63]
Dan Zhu, Hui Zhu, Cheng Huang, Rongxing Lu, Dengguo Feng, and Xuemin Shen. 2024. Efficient and Accurate Cloud-Assisted Medical Pre-Diagnosis With Privacy Preservation. IEEE Transactions on Dependable and Secure Computing, Vol. 21, 2 (2024), 860--875.
[64]
Enjun Zhu, Haiyu Feng, Long Chen, Yongqiang Lai, and Senchun Chai. 2024. MP-Net: A Multi-Center Privacy-Preserving Network for Medical Image Segmentation. IEEE Transactions on Medical Imaging (2024).
[65]
Jiren Zhu, Russell Kaplan, Justin Johnson, and Li Fei-Fei. 2018. HiDDeN: Hiding Data With Deep Networks. In Proceedings of the European Conference on Computer Vision, Vol. 11219. 682--697.

Index Terms

  1. HideMIA: Hidden Wavelet Mining for Privacy-Enhancing Medical Image Analysis

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Conferences
    MM '24: Proceedings of the 32nd ACM International Conference on Multimedia
    October 2024
    11719 pages
    ISBN:9798400706868
    DOI:10.1145/3664647
    Publication rights licensed to ACM. ACM acknowledges that this contribution was authored or co-authored by an employee, contractor or affiliate of a national government. As such, the Government retains a nonexclusive, royalty-free right to publish or reproduce this article, or to allow others to do so, for Government purposes only.

    Sponsors

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 28 October 2024

    Permissions

    Request permissions for this article.

    Check for updates

    Author Tags

    1. image hiding
    2. medical image analysis
    3. privacy-enhancing

    Qualifiers

    • Research-article

    Funding Sources

    Conference

    MM '24
    Sponsor:
    MM '24: The 32nd ACM International Conference on Multimedia
    October 28 - November 1, 2024
    Melbourne VIC, Australia

    Acceptance Rates

    MM '24 Paper Acceptance Rate 1,150 of 4,385 submissions, 26%;
    Overall Acceptance Rate 2,145 of 8,556 submissions, 25%

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • 0
      Total Citations
    • 95
      Total Downloads
    • Downloads (Last 12 months)95
    • Downloads (Last 6 weeks)12
    Reflects downloads up to 13 Feb 2025

    Other Metrics

    Citations

    View Options

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    Figures

    Tables

    Media

    Share

    Share

    Share this Publication link

    Share on social media