<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">13</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/1rgd-dmhp-rd2k</article-id>
      <title-group>
        <article-title>Protection against attacks on machine learning systems on the example of evadiation attacks in medical image analysis</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Защита от атак на системы машинного обучения на примере атак уклонения при анализе медицинских изображений</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Rudnitskaya</surname>
            <given-names>Ekaterina</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0001-9659-1244</contrib-id>
          <name>
            <surname>Poltavtseva</surname>
            <given-names>Maria</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>potavtseva@ibks.spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2022-06-10">
        <day>10</day>
        <month>06</month>
        <year>2022</year>
      </pub-date>
      <issue>2</issue>
      <fpage>148</fpage>
      <lpage>159</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/2022_2_rus.pdf"/>
      <abstract xml:lang="en">
        <p>This paper is about the adversarial attacks on machine learning systems that analyze
medical images. The authors review the existing attacks, conducts their systematization and practical
feasibility. The article contains an analysis of existing methods of protection against adversarial
attacks on machine learning systems. It describes the peculiarities of medical images. The
authors solve the problem of protection against adversarial attacks for these images based on several
defensive methods. The authors have determined the most relevant protection methods, their
implementation and testing on practical examples – the analysis of COVID‑19 patient’s images</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>attacks on machine learning systems</kwd>
        <kwd>machine learning system protection</kwd>
        <kwd>adversarial attacks</kwd>
        <kwd>medical images</kwd>
        <kwd>machine learning</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
