提出DeepSSIM++,高效检测医疗生成模型中的隐私记忆问题。
Auditing Patient Privacy in Medical Generative Models: Scalable Memorization Detection with DeepSSIM++

- 基于多尺度特征与解剖保持增强,学习类SSIM嵌入空间。
- 在理想对齐下F1提升33个百分点,实际扰动下提升46个百分点。
- 兼具解剖敏感性与计算效率,适合医疗AI隐私审计。
尽管深度生成模型为医学图像合成与数据共享带来新机遇,但其可能记忆并复现训练样本,严重威胁患者隐私。现有方法在大规模检测中面临挑战:传统像素级度量易受生成伪影干扰,通用嵌入度量则缺乏医学数据所需的解剖敏感性。为此,我们提出DeepSSIM++,一种自监督的相似性度量方法,用于医疗生成模型的可扩展隐私审计。通过多尺度特征聚合与解剖保持增强,该方法学习一个嵌入空间,其中余弦相似度近似结构相似性指数(SSIM),无需精确像素级配准。相比最优基线,DeepSSIM++在理想对齐下平均宏F1提升33个百分点,在真实空间与强度扰动下提升46个百分点。此外,其大规模相似性计算速度比解析式SSIM快数个数量级。DeepSSIM++结合解剖敏感性与计算效率,提供开源工具支持医疗生成AI的隐私审计。代码与数据公开于:https://github.com/brAIn-science/DeepSSIM。
原文摘要 · Abstract (English)
While deep generative models offer new opportunities for medical image synthesis and data sharing, their ability to memorize and reproduce training samples raises serious concerns about patient confidentiality. Detecting such memorization at scale remains challenging: traditional pixel-based metrics are sensitive to generation artifacts, whereas generic embedding-based metrics often lack the anatomical sensitivity required for medical data. To address this challenge, we introduce DeepSSIM++, a self-supervised similarity metric for scalable memorization auditing in medical generative models. By leveraging multi-scale feature aggregation and anatomy-preserving augmentations, DeepSSIM++ learns an embedding space where cosine similarity approximates the Structural Similarity Index (SSIM), eliminating the need for exact pixel-level registration. Compared with state-of-the-art baselines, DeepSSIM++ achieves an average Macro F1 improvement of 33 percentage points under ideal alignment and 46 percentage points under realistic spatial and intensity perturbations. Furthermore, it accelerates large-scale similarity computation by several orders of magnitude compared with analytical SSIM. By combining anatomical sensitivity and computational efficiency, DeepSSIM++ provides an open-source tool for scalable memorization auditing in medical generative AI. Code and data are publicly available at: https://github.com/brAIn-science/DeepSSIM.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。