MedBackdoorGuard: Detecting and Mitigating Backdoor Attacks in Deep Learning Models for MRI-Based Alzheimer’s Disease and Mild Cognitive Impairment Diagnosis

Background: Deep learning classifiers trained on structural magnetic resonance imaging (MRI) are increasingly proposed for early detection of Alzheimer’s disease (AD) and mild cognitive impairment (MCI), yet the pipelines that produce these models depend on shared datasets, pre-trained weights, and federated updates that an adversary can poison. A backdoored diagnostic model behaves correctly on ordinary scans but collapses to an attacker-chosen label whenever a hidden trigger is present, which turns a prognostic instrument for cognitive aging into a silent source of misdiagnosis. Methods: This article proposes MedBackdoorGuard, a defense framework that detects and mitigates backdoor attacks in MRI-based AD and MCI classifiers without prior knowledge of the trigger. The framework couples spectral latent screening of training data with latent trigger isolation in activation space, then immunizes the model through trigger-sensitive neuron pruning and fine-tuning under an anatomical attention consistency constraint that anchors the decision on medial temporal structures. A runtime inference guard adds superimposition entropy and anatomically informed reconstruction to purify suspicious scans at deployment. Results: Across ADNI, OASIS-1, and a public four-class dementia MRI benchmark under patch, blended, warping, and frequency triggers, MedBackdoorGuard reduces the mean attack success rate from 96.4% to 3.0% while holding clean accuracy within 0.6 percentage points of the undefended model, reaches a poisoned-sample detection AUROC of 97.4%, and identifies 59 of 60 backdoored models. Compared with the strongest defense baseline, attack success rate falls by 15.1 percentage points and clean accuracy rises by 1.7 percentage points. Conclusions: The framework restores MCI recall on triggered scans from 3.9% to 88.3%, which is the outcome that matters for early detection in cognitive aging.

Authors

Institutions

Publication Details

Journal
Brain Sciences
Published
2026-10-30
DOI
https://doi.org/10.3390/brainsci16111191
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

MedBackdoorGuard: Detecting and Mitigating Backdoor Attacks in Deep Learning Models for MRI-Based Alzheimer’s Disease and Mild Cognitive Impairment Diagnosis

Hossny Ghanem, Shahidur Rahoman Sohag, Syed Murtoza Mushrul Pasha
2 links
Brain Sciences
Adversarial Robustness in Machine Learning
article

MedBackdoorGuard: Detecting and Mitigating Backdoor Attacks in Deep Learning Models for MRI-Based Alzheimer’s Disease and Mild Cognitive Impairment Diagnosis

Hossny Ghanem, Shahidur Rahoman Sohag, Syed Murtoza Mushrul Pasha
article en

Abstract

Background: Deep learning classifiers trained on structural magnetic resonance imaging (MRI) are increasingly proposed for early detection of Alzheimer’s disease (AD) and mild cognitive impairment (MCI), yet the pipelines that produce these models depend on shared datasets, pre-trained weights, and federated updates that an adversary can poison. A backdoored diagnostic model behaves correctly on ordinary scans but collapses to an attacker-chosen label whenever a hidden trigger is present, which turns a prognostic instrument for cognitive aging into a silent source of misdiagnosis. Methods: This article proposes MedBackdoorGuard, a defense framework that detects and mitigates backdoor attacks in MRI-based AD and MCI classifiers without prior knowledge of the trigger. The framework couples spectral latent screening of training data with latent trigger isolation in activation space, then immunizes the model through trigger-sensitive neuron pruning and fine-tuning under an anatomical attention consistency constraint that anchors the decision on medial temporal structures. A runtime inference guard adds superimposition entropy and anatomically informed reconstruction to purify suspicious scans at deployment. Results: Across ADNI, OASIS-1, and a public four-class dementia MRI benchmark under patch, blended, warping, and frequency triggers, MedBackdoorGuard reduces the mean attack success rate from 96.4% to 3.0% while holding clean accuracy within 0.6 percentage points of the undefended model, reaches a poisoned-sample detection AUROC of 97.4%, and identifies 59 of 60 backdoored models. Compared with the strongest defense baseline, attack success rate falls by 15.1 percentage points and clean accuracy rises by 1.7 percentage points. Conclusions: The framework restores MCI recall on triggered scans from 3.9% to 88.3%, which is the outcome that matters for early detection in cognitive aging.

Brain SciencesVol. 16(11)
Chongqing University (CN), Trine University (US), King Abdulaziz University (SA)
King Abdulaziz University
Good health and well-being
Openalex Percentile: Top 14%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Laika access coming soon