“…Even in the claim filing phase, adversarial attacks occur when an attacker with access to medical imaging material can alter the content to make a misdiagnosis. Specifically, attackers can add or remove evidence of certain medical conditions from 3D medical scans, including: copying content from one image to another (image splicing), duplicating content within the same image to cover or add something (copy-move), and enhancing an image to give it a different appearance (image retouching), as in (Singh, Kumar, Singh and Mohan, 2017) (Sadeghi, Dadkhah, Jalab, Mazzola and Uliyan, 2018). For example, the attacks may consist in injecting and removing pixels on CT scans of patients' lung cancer (Mirsky, Mahler, Shelef and Elovici, 2019).…”