arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2302.01622eess.IVcs.AIcs.CRcs.CVcs.LG
收藏

私有、公平且准确:在医学影像中训练大规模隐私保护AI模型

Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging

University Hospital RWTH Aachen(亚琛工业大学附属医院);Technical University of Munich(慕尼黑工业大学)

Soroosh Tayebi Arasteh, Alexander Ziller, Christiane Kuhl, Marcus Makowski, Sven Nebelung, Rickmer Braren, Daniel Rueckert, Daniel Truhn, Georgios Kaissis

AI总结:

本研究在医学影像数据集上评估了差分隐私训练对模型准确性和公平性的影响,发现隐私保护训练虽略降准确性,但未加剧歧视,可实现高准确性和公平性。

摘要:

人工智能(AI)模型在医学领域的应用日益广泛。然而,由于医疗数据高度敏感,需要采取特殊预防措施以确保其保护。隐私保护的金标准是在模型训练中引入差分隐私(DP)。先前的研究表明,DP对模型准确性和公平性有负面影响,这在医学领域是不可接受的,并且是隐私保护技术广泛使用的主要障碍。在本工作中,我们评估了隐私保护训练AI模型相对于非私有训练在准确性和公平性方面的效果。为此,我们使用了两个数据集:(1)一个包含高质量临床胸部X光片的大型数据集(N=193,311),(2)一个包含三维腹部计算机断层扫描(CT)图像的数据集(N=1,625),任务是分类是否存在胰腺导管腺癌(PDAC)。这两个数据集均为回顾性收集,并由经验丰富的放射科医生手动标注。然后,我们比较了非私有深度卷积神经网络(CNN)和隐私保护(DP)模型在隐私-效用权衡(以受试者工作特征曲线下面积(AUROC)衡量)和隐私-公平性权衡(以皮尔逊相关系数r或统计奇偶差异衡量)方面的表现。我们发现,虽然隐私保护训练产生了较低的准确性,但它们在很大程度上并未加剧对年龄、性别或合并症的歧视。我们的研究表明,在真实临床数据集的具有挑战性的现实条件下,对诊断深度学习模型进行隐私保护训练是可能的,且具有出色的诊断准确性和公平性。

英文摘要:

Artificial intelligence (AI) models are increasingly used in the medical domain. However, as medical data is highly sensitive, special precautions to ensure its protection are required. The gold standard for privacy preservation is the introduction of differential privacy (DP) to model training. Prior work indicates that DP has negative implications on model accuracy and fairness, which are unacceptable in medicine and represent a main barrier to the widespread use of privacy-preserving techniques. In this work, we evaluated the effect of privacy-preserving training of AI models regarding accuracy and fairness compared to non-private training. For this, we used two datasets: (1) A large dataset (N=193,311) of high quality clinical chest radiographs, and (2) a dataset (N=1,625) of 3D abdominal computed tomography (CT) images, with the task of classifying the presence of pancreatic ductal adenocarcinoma (PDAC). Both were retrospectively collected and manually labeled by experienced radiologists. We then compared non-private deep convolutional neural networks (CNNs) and privacy-preserving (DP) models with respect to privacy-utility trade-offs measured as area under the receiver-operator-characteristic curve (AUROC), and privacy-fairness trade-offs, measured as Pearson's r or Statistical Parity Difference. We found that, while the privacy-preserving trainings yielded lower accuracy, they did largely not amplify discrimination against age, sex or co-morbidity. Our study shows that -- under the challenging realistic circumstances of a real-life clinical dataset -- the privacy-preserving training of diagnostic deep learning models is possible with excellent diagnostic accuracy and fairness.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑