arXiv:2509.16582cs.CVcs.LG2025-09中稿 · WACV 2026被引 2

提出新指标DeepSSIM,精准检测生成模型对脑部MRI的内存泄露问题。

A Novel Metric for Detecting Memorization in Generative Models for Brain MRI Synthesis

  • 通过自监督学习构建嵌入空间,匹配图像间结构相似性。
  • 在2195张脑部MRI上测试,相比现有方法F1提升52.03%。
  • 适合关注医疗生成模型安全性的研究人员与工程师。

深度生成模型在医学影像领域展现出巨大潜力,可用于生成合成数据。然而,近期研究揭示其存在严重漏洞:模型可能记忆敏感训练数据,导致患者信息泄露风险。现有方法难以高效检测生成样本中的数据泄露。本文提出DeepSSIM,一种新型自监督度量方法,用于量化生成模型中的记忆现象。DeepSSIM通过两个目标训练:一是在学习的嵌入空间中投影图像;二是使嵌入间的余弦相似度与图像空间中计算的真实SSIM(结构相似性指数)相匹配。为捕捉特定解剖特征,训练引入保持结构的增强策略,实现无需精确空间对齐即可可靠估计相似性。我们在一个案例研究中评估了DeepSSIM,使用2,195张来自IXI和CoRR两个公开数据集的脑部MRI,由潜在扩散模型(LDM)在易产生记忆的条件下生成。相比现有最优方法,DeepSSIM平均提升F1分数52.03%。代码与数据已公开于https://github.com/brAIn-science/DeepSSIM。

原文摘要 · Abstract (English)

Deep generative models have emerged as a transformative tool in medical imaging, offering substantial potential for synthetic data generation. However, recent empirical studies highlight a critical vulnerability: these models can memorize sensitive training data, posing significant risks of unauthorized patient information disclosure. Detecting memorization in generative models remains particularly challenging, necessitating scalable methods capable of identifying training data leakage across large sets of generated samples. In this work, we propose DeepSSIM, a novel self-supervised metric for quantifying memorization in generative models. DeepSSIM is trained to: i) project images into a learned embedding space and ii) force the cosine similarity between embeddings to match the ground-truth SSIM (Structural Similarity Index) scores computed in the image space. To capture domain-specific anatomical features, training incorporates structure-preserving augmentations, allowing DeepSSIM to estimate similarity reliably without requiring precise spatial alignment. We evaluate DeepSSIM in a case study involving synthetic brain MRI data generated by a Latent Diffusion Model (LDM) trained under memorization-prone conditions, using 2,195 MRI scans from two publicly available datasets (IXI and CoRR). Compared to state-of-the-art memorization metrics, DeepSSIM achieves superior performance, improving F1 scores by an average of +52.03% over the best existing method. Code and data of our approach are publicly available at the following link: https://github.com/brAIn-science/DeepSSIM.

生成模型医疗影像记忆检测自监督

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。