arXiv:2605.17345cs.CV2026-05

通过破坏3D医学图像切片间频率一致性,阻止未经授权的模型训练。

VoxShield: Protecting 3D Medical Datasets from Unauthorized Training via Frequency-Aware Inter-Slice Disruption

论文配图:VoxShield: Protecting 3D Medical Datasets from Unauthorized Training via Frequency-Aware Inter-Slice Disruption
图 1 · 摘自论文原文
  • 针对3D医学图像特性设计干扰机制,破坏切片间的空间连续性。
  • 在BraTS19和FLARE21数据集上使DSC从80.0%降至接近0.0%。
  • 扰动极小(ε=4/255),保持图像视觉质量,适合公开数据保护。

公共3D医学图像分割数据集的发布加速了临床研究,但也增加了未经授权训练AI模型的风险。现有不可学习样本(UE)方法主要针对2D场景,忽略了3D医学图像中固有的体素空间相关性和切片间解剖一致性,而这些是3D分割网络的关键先验知识。为此,我们提出VoxShield,一种专为3D网络的体素归纳偏置设计的UE框架。核心思想是系统性破坏3D架构依赖的跨切片连续性,从而从根本上破坏其空间聚合过程。具体而言,引入了切片间频率一致性破坏机制,最大化相邻切片间的频谱差异,沿z轴注入结构不一致。同时集成语义预测破坏模块,通过最大化干净与扰动输出logits的ℓ₁距离,迫使噪声渗透整个网络并破坏最终语义映射。在BraTS19和FLARE21上的实验表明,VoxShield成功降低3D分割性能,使DSC从80.0%降至接近0.0%,从88.6%降至6.8%。所有保护均以极小扰动(ε=4/255)实现,保持高视觉保真度。代码已开源。

原文摘要 · Abstract (English)

The release of public 3D medical image segmentation (MIS) datasets accelerates clinical research but simultaneously heightens risks of unauthorized AI model training. While Unlearnable Examples (UE) offer protection by injecting imperceptible perturbations to prevent effective model learning, existing methods primarily target 2D scenarios. They neglect the volumetric spatial correlations and inter-slice anatomical consistency inherent in 3D medical volumes, which serve as critical learning priors for 3D segmentation networks. To bridge this gap, we propose VoxShield, a UE framework that explicitly targets the volumetric inductive biases of 3D networks. Our core insight is that by systematically dismantling the cross-slice continuity that 3D architectures rely on, we can fundamentally impair their spatial aggregation process. Specifically, we introduce an Inter-Slice Frequency Consistency Disruption mechanism that maximizes the spectral divergence between adjacent slices, injecting structural incoherence along the $z$-axis. Complementing this structural attack, a Semantic Prediction Disruption module is incorporated. By maximizing the $\ell_1$ divergence between clean and perturbed logits, it forces the injected noise to penetrate the entire network and corrupt the final semantic mapping. Experiments on BraTS19 and FLARE21 demonstrate that VoxShield successfully degrades 3D segmentation performance, reducing the DSC from 80.0% to near 0.0% and from 88.6% to 6.8%, respectively. All protections are achieved with minimal perturbation ($ε=4/255$) to preserve high visual fidelity. The code is available at https://github.com/KK266299/VoxShield.

3D医学图像数据隐私对抗攻击图像保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。