{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T17:17:11Z","timestamp":1783185431274,"version":"3.54.6"},"reference-count":43,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T00:00:00Z","timestamp":1779840000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100018544","name":"Ningbo Municipal Science and Technology Innovative Research Team","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100018544","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017549","name":"Science and Technology Innovation 2025 Major Project of Ningbo","doi-asserted-by":"publisher","award":["2022Z126"],"award-info":[{"award-number":["2022Z126"]}],"id":[{"id":"10.13039\/501100017549","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Neurocomputing"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.neucom.2026.133970","type":"journal-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T04:09:58Z","timestamp":1778818198000},"page":"133970","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Purifying medical images with generative adversarial networks"],"prefix":"10.1016","volume":"697","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9086-7342","authenticated-orcid":false,"given":"Juexin","family":"Zhang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4338-713X","authenticated-orcid":false,"given":"Ying","family":"Weng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Boding","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rong","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5877-5648","authenticated-orcid":false,"given":"Guoping","family":"Qiu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.neucom.2026.133970_bib0005","series-title":"International Conference on Learning Representations","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014"},{"key":"10.1016\/j.neucom.2026.133970_bib0010","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2020.107332","article-title":"Understanding adversarial attacks on deep learning based medical image analysis systems","volume":"110","author":"Ma","year":"2021","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.neucom.2026.133970_bib0015","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2022.116815","article-title":"Adversarial attacks and defenses on AI in medical imaging informatics: a survey","volume":"198","author":"Kaviani","year":"2022","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.neucom.2026.133970_bib0020","series-title":"Conference of Open Innovations Association","first-page":"472","article-title":"Impact of adversarial examples on the efficiency of interpretation and use of information from HIGH-TECH medical images","author":"Vatian","year":"2019"},{"key":"10.1016\/j.neucom.2026.133970_bib0025","series-title":"International Conference on Learning Representations","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0030","series-title":"IEEE Computer Society Conference on Computer Vision and Pattern Recognition","first-page":"8571","article-title":"Deflecting adversarial attacks with pixel deflection","author":"Prakash","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0035","author":"Rao"},{"key":"10.1016\/j.neucom.2026.133970_bib0040","series-title":"International Conference on Learning Representations","article-title":"Perceptual adversarial robustness: defense against unseen threat models","author":"Laidlaw","year":"2021"},{"key":"10.1016\/j.neucom.2026.133970_bib0045","series-title":"International Conference on Learning Representations","article-title":"Fast is better than free: revisiting adversarial training","author":"Wong","year":"2020"},{"key":"10.1016\/j.neucom.2026.133970_bib0050","author":"Feinman"},{"key":"10.1016\/j.neucom.2026.133970_bib0055","series-title":"International Conference on Learning Representations","article-title":"Characterizing adversarial subspaces using local intrinsic dimensionality","author":"Ma","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0060","series-title":"IEEE International Conference on Computer Vision","first-page":"446","article-title":"Safetynet: detecting and rejecting adversarial examples robustly","author":"Lu","year":"2017"},{"key":"10.1016\/j.neucom.2026.133970_bib0065","series-title":"IEEE International Symposium on Biomedical Imaging","first-page":"1154","article-title":"Robust detection of adversarial attacks on medical images","author":"Li","year":"2020"},{"key":"10.1016\/j.neucom.2026.133970_bib0070","series-title":"International Conference on Learning Representations","article-title":"Pixeldefend: leveraging generative models to understand and defend against adversarial examples","author":"Song","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0075","series-title":"International Conference on Learning Representations","article-title":"Defense-GAN: protecting classifiers against adversarial attacks using generative models","author":"Samangouei","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0080","series-title":"International Conference on Learning Representations","article-title":"Stochastic security: adversarial defense using long-run dynamics of energy-based models","author":"Hill","year":"2020"},{"key":"10.1016\/j.neucom.2026.133970_bib0085","series-title":"International Conference on Machine Learning","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","author":"Croce","year":"2020"},{"key":"10.1016\/j.neucom.2026.133970_bib0090","author":"Nie"},{"key":"10.1016\/j.neucom.2026.133970_bib0095","series-title":"International Conference on Knowledge Discovery & Data Mining","first-page":"99","article-title":"Adversarial classification","author":"Dalvi","year":"2004"},{"key":"10.1016\/j.neucom.2026.133970_bib0100","series-title":"International Conference on Learning Representations","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015"},{"key":"10.1016\/j.neucom.2026.133970_bib0105","series-title":"IEEE Symposium on Security and Privacy","first-page":"39","article-title":"Towards evaluating the robustness of neural networks","author":"Carlini","year":"2017"},{"key":"10.1016\/j.neucom.2026.133970_bib0110","article-title":"Generative adversarial nets","volume":"27","author":"Goodfellow","year":"2014","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133970_bib0115","series-title":"International Conference on Machine Learning","first-page":"214","article-title":"Wasserstein generative adversarial networks","author":"Arjovsky","year":"2017"},{"key":"10.1016\/j.neucom.2026.133970_bib0120","series-title":"International Conference on Learning Representations","article-title":"Spectral normalization for generative adversarial networks","author":"Miyato","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0125","series-title":"International Conference on Machine Learning","first-page":"12062","article-title":"Adversarial purification with score-based generative models","author":"Yoon","year":"2021"},{"issue":"4","key":"10.1016\/j.neucom.2026.133970_bib0130","doi-asserted-by":"crossref","first-page":"2538","DOI":"10.1002\/mp.16847","article-title":"Synthetic CT generation from MRI using 3D transformer-based denoising diffusion model","volume":"51","author":"Pan","year":"2024","journal-title":"Med. Phys."},{"key":"10.1016\/j.neucom.2026.133970_bib0135","author":"Mallasto"},{"key":"10.1016\/j.neucom.2026.133970_bib0140","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","article-title":"Spectral regularization for combating mode collapse in GANs","author":"Liu","year":"2019"},{"key":"10.1016\/j.neucom.2026.133970_bib0145","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"6373","article-title":"Gradient normalization for generative adversarial networks","author":"Wu","year":"2021"},{"key":"10.1016\/j.neucom.2026.133970_bib0150","author":"Brock"},{"issue":"2","key":"10.1016\/j.neucom.2026.133970_bib0155","doi-asserted-by":"crossref","first-page":"358","DOI":"10.1137\/0708036","article-title":"An iterative algorithm for computing the best estimate of an orthogonal matrix","volume":"8","author":"Bj\u00f6rck","year":"1971","journal-title":"SIAM J. Numer. Anal."},{"key":"10.1016\/j.neucom.2026.133970_bib0160","series-title":"International Conference on Learning Representations","article-title":"Consistency regularization for generative adversarial networks","author":"Zhang","year":"2019"},{"key":"10.1016\/j.neucom.2026.133970_bib0165","series-title":"International Conference on Learning Representations","article-title":"The unusual effectiveness of averaging in GAN training","author":"Yaz","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0170","series-title":"2023 IEEE 10th International Conference on Data Science and Advanced Analytics (DSAA)","first-page":"1","article-title":"A multimodal adversarial database: towards a comprehensive assessment of adversarial attacks and defenses on medical images","author":"Hu","year":"2023"},{"key":"10.1016\/j.neucom.2026.133970_bib0175","author":"Stanczuk"},{"key":"10.1016\/j.neucom.2026.133970_bib0180","author":"Lim"},{"issue":"3","key":"10.1016\/j.neucom.2026.133970_bib0185","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3702638","article-title":"Survey on adversarial attack and defense for medical image analysis: methods and challenges","volume":"57","author":"Dong","year":"2024","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.neucom.2026.133970_bib0190","series-title":"International Conference on Learning Representations","article-title":"The intrinsic dimension of images and its impact on learning","author":"Pope","year":"2020"},{"key":"10.1016\/j.neucom.2026.133970_bib0195","series-title":"International Conference on Machine Learning (ICML)","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples","author":"Athalye","year":"2018"},{"key":"10.1016\/j.neucom.2026.133970_bib0200","series-title":"Advances in Neural Information Processing Systems (NeurIPS), 33","first-page":"15958","article-title":"On adaptive attacks to adversarial example defenses","author":"Tram\u00e8r","year":"2020"},{"key":"10.1016\/j.neucom.2026.133970_bib0205","series-title":"Advances in Neural Information Processing Systems (NeurIPS)","article-title":"DiffAttack: evasion attacks against diffusion-based adversarial purification","author":"Kang","year":"2023"},{"key":"10.1016\/j.neucom.2026.133970_bib0210","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133970_bib0215","series-title":"International Conference on Learning Representations","article-title":"Denoising diffusion implicit models","author":"Song","year":"2021"}],"container-title":["Neurocomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226013688?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226013688?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T16:39:54Z","timestamp":1783183194000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0925231226013688"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":43,"alternative-id":["S0925231226013688"],"URL":"https:\/\/doi.org\/10.1016\/j.neucom.2026.133970","relation":{},"ISSN":["0925-2312"],"issn-type":[{"value":"0925-2312","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Purifying medical images with generative adversarial networks","name":"articletitle","label":"Article Title"},{"value":"Neurocomputing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.neucom.2026.133970","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"133970"}}