{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T18:50:42Z","timestamp":1772823042992,"version":"3.50.1"},"reference-count":40,"publisher":"Wiley","license":[{"start":{"date-parts":[[2022,6,8]],"date-time":"2022-06-08T00:00:00Z","timestamp":1654646400000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100002701","name":"Ministry of Education, South Korea","doi-asserted-by":"publisher","award":["2021R1I1A1A01040308"],"award-info":[{"award-number":["2021R1I1A1A01040308"]}],"id":[{"id":"10.13039\/501100002701","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002514","name":"Korea Military Academy","doi-asserted-by":"publisher","award":["2021R1I1A1A01040308"],"award-info":[{"award-number":["2021R1I1A1A01040308"]}],"id":[{"id":"10.13039\/501100002514","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Journal of Sensors"],"published-print":{"date-parts":[[2022,6,8]]},"abstract":"<jats:p>Deep neural networks (DNNs) provide excellent performance in image recognition, speech recognition, video recognition, and pattern analysis. These neural networks are often applied in the medical field to predict or classify patients\u2019 illnesses. One such network, the U-Net model, has shown good performance in data segmentation and is an important technology in medical imaging. However, deep neural networks such as those applied in medicine are vulnerable to attack by adversarial examples. Adversarial examples are samples created by adding a small amount of noise to an original data sample that is difficult for a human to see but that induces misclassification by the targeted model. In this paper, we propose AdvU-Net, a method for generating an adversarial example targeting the U-Net model used in segmentation. Performance was analyzed according to epsilon, using the fast gradient sign method (FGSM) for generating adversarial examples. We used ISBI 2012 as the dataset and TensorFlow as the machine learning library. In the experiment, when an adversarial example was generated using an epsilon value of 0.3, the pixel error was 3.54 or greater while the pixel error of the original sample was maintained at 0.15 or less.<\/jats:p>","DOI":"10.1155\/2022\/4390413","type":"journal-article","created":{"date-parts":[[2022,6,8]],"date-time":"2022-06-08T17:36:08Z","timestamp":1654709768000},"page":"1-13","source":"Crossref","is-referenced-by-count":11,"title":["AdvU-Net: Generating Adversarial Example Based on Medical Image and Targeting U-Net Model"],"prefix":"10.1155","volume":"2022","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1169-9892","authenticated-orcid":true,"given":"Hyun","family":"Kwon","sequence":"first","affiliation":[{"name":"Department of Artificial Intelligence and Data Science, Korea Military Academy, 574 Hwarang-ro, Nowon-gu, Seoul 01819, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3307-0940","authenticated-orcid":true,"given":"Jongwook","family":"Jeong","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Korea Military Academy, 574 Hwarang-ro, Nowon-gu, Seoul 01819, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2014.09.003"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1146\/annurev-bioeng-071516-044442"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1001\/jama.2016.17216"},{"key":"4","article-title":"Intriguing properties of neural networks","author":"C. Szegedy"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/5595026"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"8","article-title":"Explaining and harnessing adversarial examples","author":"I. Goodfellow"},{"key":"9","article-title":"Conditional image synthesis with auxiliary classifier gans","author":"A. Odena","year":"2016"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3042839"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.51"},{"key":"14","first-page":"2574","article-title":"Deepfool: a simple and accurate method to fool deep neural networks","author":"S.-M. Moosavi-Dezfooli"},{"key":"15","article-title":"Hotflip: white-box adversarial examples for text classification","author":"J. Ebrahimi","year":"2017"},{"key":"16","first-page":"4733","article-title":"Enhancing adversarial example transferability with an intermediate level attack","author":"Q. Huang"},{"key":"17","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"Y. Liu","year":"2016"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"19","doi-asserted-by":"crossref","article-title":"Universal adversarial perturbations","author":"S. M. Moosavi Dezfooli","DOI":"10.1109\/CVPR.2017.17"},{"key":"20","doi-asserted-by":"crossref","DOI":"10.1201\/9781351251389-8","article-title":"Adversarial examples in the physical world","volume-title":"Artificial Intelligence Safety and Security","author":"A. Kurakin","year":"2018"},{"key":"21","article-title":"Improving black-box adversarial attacks with a transfer-based prior","volume":"32","author":"S. Cheng","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3006130"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2866197"},{"key":"24","first-page":"1310","article-title":"Simple black-box adversarial attacks on deep neural networks","author":"N. Narodytska"},{"key":"25","first-page":"9185","article-title":"Boosting adversarial attacks with momentum","author":"Y. Dong"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1109\/ICME.2019.00095"},{"key":"27","first-page":"4322","article-title":"Decoupling direction and norm for efficient gradient-based l2 adversarial attacks and defenses","author":"J. Rony"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437529"},{"key":"29","article-title":"Adversarial attacks on neural network policies","author":"S. Huang","year":"2017"},{"key":"30","first-page":"16048","article-title":"Understanding and improving fast adversarial training","volume":"33","author":"M. Andriushchenko","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"31","article-title":"Towards imperceptible and robust adversarial example attacks against neural networks","volume":"32","author":"B. Luo","year":"2018","journal-title":"In Proceedings of the AAAI Conference on Artificial Intelligence"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-018-0012-9"},{"key":"33","article-title":"Adversarial example in remote sensing image recognition","author":"L. Chen","year":"2019"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102695"},{"key":"35","doi-asserted-by":"publisher","DOI":"10.2352\/j.imagingsci.technol.2020.64.2.020508"},{"key":"36","first-page":"265","article-title":"Tensorflow: a system for large-scale machine learning","volume":"16","author":"M. Abadi","year":"2016","journal-title":"In 12th Usenix Symposium On Operating Systems Design And Implementation (Osdi 16)"},{"key":"37","article-title":"U-net on biomedical images","author":"A. Persekian"},{"key":"38","article-title":"Adam: a method for stochastic optimization","author":"D. Kingma"},{"key":"39","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3499324"},{"key":"40","first-page":"2672","article-title":"Generative adversarial nets","volume":"27","author":"I. Goodfellow","year":"2014","journal-title":"In Advances In Neural Information Processing Systems"}],"container-title":["Journal of Sensors"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/js\/2022\/4390413.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/js\/2022\/4390413.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/js\/2022\/4390413.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,8]],"date-time":"2022-06-08T17:36:19Z","timestamp":1654709779000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/js\/2022\/4390413\/"}},"subtitle":[],"editor":[{"given":"Carlos","family":"Marques","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2022,6,8]]},"references-count":40,"alternative-id":["4390413","4390413"],"URL":"https:\/\/doi.org\/10.1155\/2022\/4390413","relation":{},"ISSN":["1687-7268","1687-725X"],"issn-type":[{"value":"1687-7268","type":"electronic"},{"value":"1687-725X","type":"print"}],"subject":[],"published":{"date-parts":[[2022,6,8]]}}}