{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T04:59:57Z","timestamp":1792126797868,"version":"4.4.0"},"reference-count":48,"publisher":"MDPI AG","issue":"9","license":[{"start":{"date-parts":[[2023,5,4]],"date-time":"2023-05-04T00:00:00Z","timestamp":1683158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JCM"],"abstract":"<jats:p>The artificial intelligence (AI) systems used for diagnosing ophthalmic diseases have significantly progressed in recent years. The diagnosis of difficult eye conditions, such as cataracts, diabetic retinopathy, age-related macular degeneration, glaucoma, and retinopathy of prematurity, has become significantly less complicated as a result of the development of AI algorithms, which are currently on par with ophthalmologists in terms of their level of effectiveness. However, in the context of building AI systems for medical applications such as identifying eye diseases, addressing the challenges of safety and trustworthiness is paramount, including the emerging threat of adversarial attacks. Research has increasingly focused on understanding and mitigating these attacks, with numerous articles discussing this topic in recent years. As a starting point for our discussion, we used the paper by Ma et al. \u201cUnderstanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems\u201d. A literature review was performed for this study, which included a thorough search of open-access research papers using online sources (PubMed and Google). The research provides examples of unique attack strategies for medical images. Unfortunately, unique algorithms for attacks on the various ophthalmic image types have yet to be developed. It is a task that needs to be performed. As a result, it is necessary to build algorithms that validate the computation and explain the findings of artificial intelligence models. In this article, we focus on adversarial attacks, one of the most well-known attack methods, which provide evidence (i.e., adversarial examples) of the lack of resilience of decision models that do not include provable guarantees. Adversarial attacks have the potential to provide inaccurate findings in deep learning systems and can have catastrophic effects in the healthcare industry, such as healthcare financing fraud and wrong diagnosis.<\/jats:p>","DOI":"10.3390\/jcm12093266","type":"journal-article","created":{"date-parts":[[2023,5,4]],"date-time":"2023-05-04T01:33:36Z","timestamp":1683164016000},"page":"3266","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":24,"title":["Deceptive Tricks in Artificial Intelligence: Adversarial Attacks in Ophthalmology"],"prefix":"10.3390","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9897-3561","authenticated-orcid":false,"given":"Agnieszka M.","family":"Zbrzezny","sequence":"first","affiliation":[{"name":"Faculty of Mathematics and Computer Science, University of Warmia and Mazury, 10-710 Olsztyn, Poland"},{"name":"Faculty of Design, SWPS University of Social Sciences and Humanities, Chodakowska 19\/31, 03-815 Warsaw, Poland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3724-2391","authenticated-orcid":false,"given":"Andrzej E.","family":"Grzybowski","sequence":"additional","affiliation":[{"name":"Institute for Research in Ophthalmology, Foundation for Ophthalmology Development, 60-836 Poznan, Poland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,5,4]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"318","DOI":"10.1097\/ICU.0000000000000676","article-title":"Big data requirements for artificial intelligence","volume":"31","author":"Wang","year":"2020","journal-title":"Curr. Opin. Ophthalmol."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1097\/APO.0000000000000304","article-title":"Big Data in Ophthalmology","volume":"9","author":"Cheng","year":"2020","journal-title":"Asia-Pac. J. Ophthalmol."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"571","DOI":"10.1016\/j.ophtha.2021.12.017","article-title":"DeepLensNet: Deep Learning Automated Diagnosis and Quantitative Classification of Cataract Type and Severity","volume":"129","author":"Keenan","year":"2022","journal-title":"Ophthalmology"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"14326","DOI":"10.1038\/s41598-021-93632-8","article-title":"An Interpretable Multiple-Instance Approach for the Detection of referable Diabetic Retinopathy from Fundus Images","volume":"11","author":"Papadopoulos","year":"2021","journal-title":"Sci. Rep."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"893","DOI":"10.1016\/j.cell.2018.02.013","article-title":"Learning from Everyday Images Enables Expert-like Diagnosis of Retinal Diseases","volume":"172","author":"Rampasek","year":"2018","journal-title":"Cell"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"3687","DOI":"10.1038\/s41598-020-80839-4","article-title":"Predicting intraocular pressure using systemic variables or fundus photography with deep learning in a health examination cohort","volume":"11","author":"Ishii","year":"2021","journal-title":"Sci. Rep."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"1122","DOI":"10.1016\/j.cell.2018.02.010","article-title":"Identifying Medical Diagnoses and Treatable Diseases by Image-Based Deep Learning","volume":"172","author":"Kermany","year":"2018","journal-title":"Cell"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"1735","DOI":"10.1136\/bjophthalmol-2019-315338","article-title":"Prediction of OCT images of short-term response to anti-VEGF treatment for neovascular age-related macular degeneration using generative adversarial network","volume":"104","author":"Liu","year":"2020","journal-title":"Br. J. Ophthalmol."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1629","DOI":"10.1136\/bjophthalmol-2020-316300","article-title":"Generative adversarial networks to predict treatment response for neovascular age-related macular degeneration: Interesting, but is it useful?","volume":"104","author":"Liu","year":"2020","journal-title":"Br. J. Ophthalmol."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1070","DOI":"10.1001\/jamaophthalmol.2020.3269","article-title":"Low-Shot Deep Learning of Diabetic Retinopathy With Potential Applications to Address Artificial Intelligence Bias in Retinal Diagnostics and Rare Ophthalmic Diseases","volume":"138","author":"Burlina","year":"2020","journal-title":"JAMA Ophthalmol."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"4828","DOI":"10.1038\/s41467-021-25138-w","article-title":"Automatic detection of 39 fundus diseases and conditions in retinal photographs using deep neural networks","volume":"12","author":"Cen","year":"2021","journal-title":"Nat. Commun."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1167\/tvst.9.2.29","article-title":"Assessment of Generative Adversarial Networks Model for Synthetic Optical Coherence Tomography Images of Retinal Disorders","volume":"9","author":"Zheng","year":"2020","journal-title":"Transl. Vis. Sci. Technol."},{"key":"ref_13","first-page":"060901","article-title":"Review on diabetic retinopathy with deep learning methods","volume":"8","author":"Shekar","year":"2021","journal-title":"J. Med. Imaging"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Zhao, X., Lv, B., Meng, L., Xia, Z., Wang, D., Zhang, W., Wang, E., Lv, C., Xie, G., and Chen, Y. (2022). Development and quantitative assessment of deep learning-based image enhancement for optical coherence tomography. BMC Ophthalmol., 22.","DOI":"10.1186\/s12886-022-02299-w"},{"key":"ref_15","unstructured":"Goodfellow, I.J., Shlens, J., and Szegedy, C. (2015, January 7\u20139). Explaining and Harnessing Adversarial Examples. Proceedings of the 3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"e384","DOI":"10.1016\/S2589-7500(22)00003-6","article-title":"The medical algorithmic audit","volume":"4","author":"Liu","year":"2022","journal-title":"Lancet Digit. Health"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Mahmood, K., Mahmood, R., and van Dijk, M. (2023, April 25). On the Robustness of Vision Transformers to Adversarial Examples. Available online: https:\/\/openaccess.thecvf.com\/content\/ICCV2021\/papers\/Mahmood_On_the_Robustness_of_Vision_Transformers_to_Adversarial_Examples_ICCV_2021_paper.pdf.","DOI":"10.1109\/ICCV48922.2021.00774"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1923","DOI":"10.1109\/LSP.2021.3112099","article-title":"Inheritance Attention Matrix-Based Universal Adversarial Perturbations on Vision Transformers","volume":"28","author":"Hu","year":"2021","journal-title":"IEEE Signal Process. Lett."},{"key":"ref_19","unstructured":"Naseer, M., Ranasinghe, K., Khan, S., Hayat, M., Khan, F.S., and Yang, M.H. (2023, April 25). Intriguing Properties of Vision Transformers. Available online: https:\/\/proceedings.neurips.cc\/paper\/2021\/file\/c404a5adbf90e09631678b13b05d9d7a-Paper.pdf."},{"key":"ref_20","unstructured":"Wang, Z., and Ruan, W. (2023, April 22). Understanding Adversarial Robustness of Vision Transformers via Cauchy Problem. Available online: https:\/\/arxiv.org\/abs\/2208.00906."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"107332","DOI":"10.1016\/j.patcog.2020.107332","article-title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","volume":"110","author":"Ma","year":"2020","journal-title":"Pattern Recognit."},{"key":"ref_22","unstructured":"Paschali, M., Conjeti, S., Navarro, F., and Navab, N. (2018). Generalizability vs. Robustness: Adversarial Examples for Medical Imaging. arXiv."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Avramidis, K., Rostami, M., Chang, M., and Narayanan, S. (2022, January 16\u201319). Automating Detection of Papilledema in Pediatric Fundus Images with Explainable Machine Learning. Proceedings of the 2022 IEEE International Conference on Image Processing (ICIP), Bordeaux, France.","DOI":"10.1109\/ICIP46576.2022.9897529"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Vento, M., and Percannella, G. (2019). Proceedings of the Computer Analysis of Images and Patterns, Springer International Publishing.","DOI":"10.1007\/978-3-030-29888-3"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Chetoui, M., and Akhloufi, M.A. (2020, January 20\u201324). Explainable Diabetic Retinopathy using EfficientNET. Proceedings of the 2020 42nd Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC), Montr\u00e9al, QC, Canada.","DOI":"10.1109\/EMBC44109.2020.9175664"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Ribeiro, M.T., Singh, S., and Guestrin, C. (2016, January 13\u201317). \u201cWhy Should I Trust You?\u201d: Explaining the Predictions of Any Classifier. Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, San Francisco, CA, USA.","DOI":"10.1145\/2939672.2939778"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"1287","DOI":"10.1126\/science.aaw4399","article-title":"Adversarial attacks on medical machine learning","volume":"363","author":"Finlayson","year":"2019","journal-title":"Science"},{"key":"ref_28","unstructured":"Finlayson, S.G., Kohane, I.S., and Beam, A.L. (2018). Adversarial Attacks Against Medical Deep Learning Systems. arXiv."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Shah, A., Lynch, S., Niemeijer, M., Amelon, R., Clarida, W., Folk, J., Russell, S., Wu, X., and Abr\u00e0moff, M.D. (2018, January 4\u20137). Susceptibility to misdiagnosis of adversarial images by deep learning based retinal image analysis algorithms. Proceedings of the 2018 IEEE 15th International Symposium on Biomedical Imaging (ISBI 2018), Washington, DC, USA.","DOI":"10.1109\/ISBI.2018.8363846"},{"key":"ref_30","unstructured":"Pereira, F., Burges, C., Bottou, L., and Weinberger, K. (2012). Proceedings of the Advances in Neural Information Processing Systems, Curran Associates, Inc."},{"key":"ref_31","unstructured":"Paszke, A., Chaurasia, A., Kim, S., and Culurciello, E. (2016). ENet: A Deep Neural Network Architecture for Real-Time Semantic Segmentation. arXiv."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"5200","DOI":"10.1167\/iovs.16-19964","article-title":"Improved Automated Detection of Diabetic Retinopathy on a Publicly Available Dataset Through Integration of Deep Learning","volume":"57","author":"Lou","year":"2016","journal-title":"Investig. Ophthalmol. Vis. Sci."},{"key":"ref_33","unstructured":"Kurakin, A., Goodfellow, I.J., and Bengio, S. (2017, January 24\u201326). Adversarial examples in the physical world. Proceedings of the 5th International Conference on Learning Representations, ICLR 2017, Toulon, France."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"509","DOI":"10.1177\/193229680900300315","article-title":"EyePACS: An Adaptable Telemedicine System for Diabetic Retinopathy Screening","volume":"3","author":"Cuadros","year":"2009","journal-title":"J. Diabetes Sci. Technol."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"2402","DOI":"10.1001\/jama.2016.17216","article-title":"Development and Validation of a Deep Learning Algorithm for Detection of Diabetic Retinopathy in Retinal Fundus Photographs","volume":"316","author":"Gulshan","year":"2016","journal-title":"JAMA"},{"key":"ref_36","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (May, January 30). Towards Deep Learning Models Resistant to Adversarial Attacks. Proceedings of the 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada."},{"key":"ref_37","unstructured":"Buckman, J., Roy, A., Raffel, C., and Goodfellow, I. (May, January 30). Thermometer Encoding: One Hot Way To Resist Adversarial Examples. Proceedings of the International Conference on Learning Representations, Vancouver, BC, Canada."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"1213","DOI":"10.1001\/jamaophthalmol.2020.3442","article-title":"Outcomes of Adversarial Attacks on Deep Learning Models for Ophthalmology Imaging Domains","volume":"138","author":"Yoo","year":"2020","journal-title":"JAMA Ophthalmol."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Lal, S., Rehman, S.U., Shah, J.H., Meraj, T., Rauf, H.T., Dama\u0161evi\u010dius, R., Mohammed, M.A., and Abdulkareem, K.H. (2021). Adversarial Attack and Defence through Adversarial Training and Feature Fusion for Diabetic Retinopathy Recognition. Sensors, 21.","DOI":"10.3390\/s21113922"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Hirano, H., Minagi, A., and Takemoto, K. (2020). Universal adversarial attacks on deep neural networks for medical image classification. BMC Med. Imaging, 21.","DOI":"10.21203\/rs.3.rs-70727\/v2"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Ozbulak, U., Van Messem, A., and De Neve, W. (2019). Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation. arXiv.","DOI":"10.1007\/978-3-030-32245-8_34"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"de Bruijne, M., Cattin, P.C., Cotin, S., Padoy, N., Speidel, S., Zheng, Y., and Essert, C. (2021). Proceedings of the Medical Image Computing and Computer Assisted Intervention\u2014MICCAI 2021, Springer International Publishing.","DOI":"10.1007\/978-3-030-87237-3"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1016\/j.ins.2020.12.013","article-title":"Target attack on biomedical image segmentation model based on multi-scale gradients","volume":"554","author":"Shao","year":"2021","journal-title":"Inf. Sci."},{"key":"ref_44","unstructured":"Qi, G., Gong, L., Song, Y., Ma, K., and Zheng, Y. (2023, April 25). Stabilized Medical Image Attacks. Available online: https:\/\/arxiv.org\/abs\/2103.05232."},{"key":"ref_45","unstructured":"Commision, E. (2023, April 22). Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) and Amending Certain Union Legislative Acts. Available online: https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:52021PC0206&from=EN."},{"key":"ref_46","unstructured":"(2023, April 25). Food and Drug Administration Artificial Intelligence\/Machine Learning (AI\/ML)-Based Software as a Medical Device (SaMD) Action Plan, Available online: https:\/\/www.fda.gov\/media\/145022\/download."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Carlini, N., and Wagner, D.A. (2017, January 22\u201326). Towards Evaluating the Robustness of Neural Networks. Proceedings of the 2017 IEEE Symposium on Security and Privacy, SP 2017, San Jose, CA, USA.","DOI":"10.1109\/SP.2017.49"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S., Fawzi, A., Fawzi, O., and Frossard, P. (2017, January 21\u201326). Universal adversarial perturbations. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Honolulu, HI, USA.","DOI":"10.1109\/CVPR.2017.17"}],"container-title":["Journal of Clinical Medicine"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2077-0383\/12\/9\/3266\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T19:28:52Z","timestamp":1760124532000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2077-0383\/12\/9\/3266"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,4]]},"references-count":48,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2023,5]]}},"alternative-id":["jcm12093266"],"URL":"https:\/\/doi.org\/10.3390\/jcm12093266","relation":{},"ISSN":["2077-0383"],"issn-type":[{"value":"2077-0383","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,5,4]]}}}