@misc{ronneberger2015unet,
      title={U-Net: Convolutional Networks for Biomedical Image Segmentation}, 
      author={Olaf Ronneberger and Philipp Fischer and Thomas Brox},
      year={2015},
      eprint={1505.04597},
      archivePrefix={arXiv},
      primaryClass={cs.CV}
}

@misc{elkhayat2025foundation,
      title={Foundation Models as Class-Incremental Learners for Dermatological Image Classification}, 
      author={Mohamed Elkhayat and Mohamed Mahmoud and Jamil Fayyad and Nourhan Bayasi},
      year={2025},
      eprint={2507.14050},
      archivePrefix={arXiv},
      primaryClass={cs.CV}
}

@misc{henry2022vision,
      title={Vision Transformers in Medical Imaging: A Review}, 
      author={Emerald U. Henry and Onyeka Emebob and Conrad Asotie Omonhinmin},
      year={2022},
      eprint={2211.10043},
      archivePrefix={arXiv},
      primaryClass={cs.CV}
}

@inproceedings{Szegedy2014Intriguing,
  title={Intriguing properties of neural networks},
  author={Christian Szegedy and Wojciech Zaremba and Ilya Sutskever and Joan Bruna and Dumitru Erhan and Ian J. Goodfellow and Rob Fergus},
  booktitle={International Conference on Learning Representations (ICLR)},
  year={2014},
  note={Poster Presentation},
  eprint={1312.6199},
  archivePrefix={arXiv},
  primaryClass={cs.CV}
}

@inproceedings{Goodfellow2015Explaining,
  title={Explaining and Harnessing Adversarial Examples},
  author={Ian J. Goodfellow and Jonathon Shlens and Christian Szegedy},
  booktitle={International Conference on Learning Representations (ICLR)},
  year={2015},
  eprint={1412.6572},
  archivePrefix={arXiv},
  primaryClass={cs.LG}
}

@article{Finlayson2019Adversarial,
  title={Adversarial attacks on medical machine learning},
  author={Samuel G. Finlayson and John D. Bowers and Joichi Ito and Jonathan L. Zittrain and Andrew L. Beam and Isaac S. Kohane},
  journal={Science},
  volume={363},
  number={6433},
  pages={1287--1289},
  year={2019},
  publisher={American Association for the Advancement of Science}
}

@article{Maier-Hein2022Metrics,
  title={Metrics reloaded: recommendations for image analysis validation},
  author={Maier-Hein, Lena and Reinke, Annika and Godau, Patrick and Tizabi, Minu D and Buettner, Florian and Christodoulou, Evangelia and Glocker, Ben and Isensee, Fabian and Kleesiek, Jens and Kozubek, Michal and Reyes, Mauricio and Riegler, Michael A and Wiesenfarth, Manuel and Kavur, A Emre and Sudre, Carole H and Baumgartner, Michael and Eisenmann, Matthias and Heckmann-Nötzel, Doreen and Rädsch, Tim and Acion, Laura and Antonelli, Michela and Arbel, Tal and Bakas, Spyridon and Benis, Arriel and Blaschko, Matthew and Cardoso, M Jorge and Cheplygina, Veronika and Cimini, Beth A and Collins, Gary S and Farahani, Keyvan and Ferrer, Luciana and Galdran, Adrian and van Ginneken, Bram and Haase, Robert and Hashimoto, Daniel A and Hoffman, Michael M and Huisman, Merel and Jannin, Pierre and Kahn, Charles E and Kainmueller, Dagmar and Kainz, Bernhard and Karargyris, Alexandros and Karthikesalingam, Alan and Kenngott, Hannes and Kofler, Florian and Kopp-Schneider, Annette and Kreshuk, Anna and Kurc, Tahsin and Landman, Bennett A and Litjens, Geert and Madani, Amin and Maier-Hein, Klaus and Martel, Anne L and Mattson, Peter and Meijering, Erik and Menze, Bjoern and Moons, Karel G M and Müller, Henning and Nichyporuk, Brennan and Nickel, Felix and Petersen, Jens and Rajpoot, Nasir and Rieke, Nicola and Saez-Rodriguez, Julio and S{\'a}nchez, Clara I and Shetty, Shravya and van Smeden, Maarten and Summers, Ronald M and Taha, Abdel A and Tiulpin, Aleksei and Tsaftaris, Sotirios A and Van Calster, Ben and Varoquaux, Ga{\"e}l and J{\"a}ger, Paul F},
  journal={Nature Machine Intelligence},
  volume={4},
  number={12},
  pages={1246--1268},
  year={2022},
  publisher={Nature Publishing Group}
}

@article{Madry2017Towards,
  title={Towards Deep Learning Models Resistant to Adversarial Attacks},
  author={Aleksander Madry and Aleksandar Makelov and Ludwig Schmidt and Dimitris Tsipras and Adrian Vladu},
  journal={arXiv preprint arXiv:1706.06083},
  year={2017}
}

@inproceedings{Guo2019SimBA,
  title={Simple Black-box Adversarial Attacks},
  author={Chuan Guo and Jacob R. Gardner and Yurong You and Andrew Gordon Wilson and Kilian Q. Weinberger},
  booktitle={International Conference on Machine Learning (ICML)},
  pages={2494--2503},
  year={2019}
}

@inproceedings{Alzantot2019GenAttack,
  title={GenAttack: Practical Black-box Attacks with Gradient-Free Optimization},
  author={Moustafa Alzantot and Yash Sharma and Supriyo Chakraborty and Huan Zhang and Cho-Jui Hsieh and Mani Srivastava},
  booktitle={Proceedings of the Genetic and Evolutionary Computation Conference (GECCO)},
  pages={681--689},
  year={2019}
}

@article{Ma_2021,
   title={Understanding adversarial attacks on deep learning based medical image analysis systems},
   volume={110},
   ISSN={0031-3203},
   url={http://dx.doi.org/10.1016/j.patcog.2020.107332},
   DOI={10.1016/j.patcog.2020.107332},
   journal={Pattern Recognition},
   publisher={Elsevier BV},
   author={Ma, Xingjun and Niu, Yuhao and Gu, Lin and Wang, Yisen and Zhao, Yitian and Bailey, James and Lu, Feng},
   year={2021},
   month=feb, pages={107332} }

@article{BO2024108337,
title = {Application of artificial intelligence radiomics in the diagnosis, treatment, and prognosis of hepatocellular carcinoma},
journal = {Computers in Biology and Medicine},
volume = {173},
pages = {108337},
year = {2024},
issn = {0010-4825},
doi = {https://doi.org/10.1016/j.compbiomed.2024.108337},
url = {https://www.sciencedirect.com/science/article/pii/S0010482524004219},
author = {Zhiyuan Bo and Jiatao Song and Qikuan He and Bo Chen and Ziyan Chen and Xiaozai Xie and Danyang Shu and Kaiyu Chen and Yi Wang and Gang Chen},
}

@article{konzosuala_frd2025,
      title={Fr\'echet Radiomic Distance (FRD): A Versatile Metric for Comparing Medical Imaging Datasets}, 
      author = {Konz, Nicholas and Osuala, Richard and Verma, Preeti and Chen, Yuwen and Gu, Hanxue and Dong, Haoyu and Chen, Yaqian and Marshall, Andrew and Garrucho, Lidia and Kushibar, Kaisar and Lang, Daniel M. and Kim, Gene S. and Grimm, Lars J. and Lewin, John M. and Duncan, James S. and Schnabel, Julia A. and Diaz, Oliver and Lekadir, Karim and Mazurowski, Maciej A.},
      journal = {arXiv preprint},
      year={2025},
      eprint={2412.01496},
      archivePrefix={arXiv},
      primaryClass={cs.CV},
      url={https://arxiv.org/abs/2412.01496}, 
}

@inproceedings{Heusel2017FID,
  title={GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium},
  author={Heusel, Martin and Ramsauer, Hubert and Unterthiner, Thomas and Nessler, Bernhard and Hochreiter, Sepp},
  booktitle={Advances in Neural Information Processing Systems (NeurIPS)},
  volume={30},
  year={2017},
  url={https://arxiv.org/abs/1706.08500}
}

@article{Wang2020Perception,
  title={Perception Improvement for Free: Exploring Imperceptible Black-box Adversarial Attacks on Image Classification},
  author={Wang, Yongwei and Feng, Mingquan and Ward, Rabab and Wang, Z Jane and Wang, Lanjun},
  journal={arXiv preprint arXiv:2011.05254},
  year={2020},
  url={https://arxiv.org/abs/2011.05254}
}

@article{Raissi2019PINNs,
  title={Physics-informed neural networks: A deep learning framework for solving forward and inverse problems involving nonlinear partial differential equations},
  author={Raissi, Maziar and Perdikaris, Paris and Karniadakis, George E},
  journal={Journal of Computational Physics},
  volume={378},
  pages={686--707},
  year={2019},
  publisher={Elsevier},
  doi={10.1016/j.jcp.2018.10.045},
  url={https://www.sciencedirect.com/science/article/pii/S0021999118307125}
}

@article{Wong2020Wasserstein,
  title={Stronger and Faster Wasserstein Adversarial Attacks},
  author={Wong, Eric and Schmidt, Ludwig and Madry, Aleksander},
  journal={arXiv preprint arXiv:2008.02883},
  year={2020},
  url={https://arxiv.org/abs/2008.02883}
}

@article{deb2002fast,
  title        = {A fast and elitist multiobjective genetic algorithm: {NSGA-II}},
  author       = {Deb, Kalyanmoy and Pratap, Amrit and Agarwal, Sameer and Meyarivan, T. A. M. T.},
  journal      = {IEEE Transactions on Evolutionary Computation},
  volume       = {6},
  number       = {2},
  pages        = {182--197},
  year         = {2002},
  doi          = {10.1109/4235.996017}
}

@article{coello2004handling,
  title        = {Handling multiple objectives with particle swarm optimization},
  author       = {Coello Coello, Carlos A. and Pulido, Gregorio T.},
  journal      = {IEEE Transactions on Evolutionary Computation},
  volume       = {8},
  number       = {3},
  pages        = {256--279},
  year         = {2004},
  doi          = {10.1109/TEVC.2004.826067}
}

@article{Tschandl2018HAM10000,
  title        = {The {HAM}10000 dataset, a large collection of multi-source dermatoscopic images of common pigmented skin lesions},
  author       = {Tschandl, Philipp and Rosendahl, Cliff and Kittler, Harald},
  journal      = {Scientific Data},
  volume       = {5},
  number       = {1},
  pages        = {1--9},
  year         = {2018},
  publisher    = {Nature Publishing Group}
}

@incollection{Ballerini2013ColorTextureKNN,
  title        = {A color and texture based hierarchical k-nn approach to the classification of non-melanoma skin lesions},
  author       = {Ballerini, Lucia and Fisher, Robert B. and Aldridge, Brian and Rees, Jonathan},
  booktitle    = {Color Medical Image Analysis},
  pages        = {63--86},
  year         = {2013},
  publisher    = {Springer}
}

@article{Kawahara2018SevenPoint,
  title        = {Seven-point checklist and skin lesion classification using multitask multimodal neural nets},
  author       = {Kawahara, Jeremy and Daneshvar, Shadi and Argenziano, Giuseppe and Hamarneh, Ghassan},
  journal      = {IEEE Journal of Biomedical and Health Informatics},
  volume       = {23},
  number       = {2},
  pages        = {538--546},
  year         = {2018},
  publisher    = {IEEE}
}

@misc{kiraly2024healthaideveloperfoundations,
      title={Health AI Developer Foundations}, 
      author={Atilla P. Kiraly and Sebastien Baur and Kenneth Philbrick and Fereshteh Mahvar and Liron Yatziv and Tiffany Chen and Bram Sterling and Nick George and Fayaz Jamil and Jing Tang and Kai Bailey and Faruk Ahmed and Akshay Goel and Abbi Ward and Lin Yang and Andrew Sellergren and Yossi Matias and Avinatan Hassidim and Shravya Shetty and Daniel Golden and Shekoofeh Azizi and David F. Steiner and Yun Liu and Tim Thelin and Rory Pilgrim and Can Kirmizibayrak},
      year={2024},
      eprint={2411.15128},
      archivePrefix={arXiv},
      primaryClass={cs.LG},
      url={https://arxiv.org/abs/2411.15128}, 
}

@article{Yan2024DermFoundation,
  title        = {A general-purpose multimodal foundation model for dermatology},
  author       = {Yan, Shilin and Yu, Zhi and Primiero, Carlo and Vico-Alonso, Carlos and Wang, Zhen and Yang, Li and Tschandl, Philipp and Hu, Min and Tan, Guoqiang and Tang, Victor and Ng, Andrew B. and Powell, David and Bonnington, Peter and See, Siew and Janda, Martin and Mar, Vanessa and Kittler, Harald and Soyer, H. Peter and Ge, Zhihui},
  journal      = {arXiv preprint arXiv:2410.15038},
  year         = {2024}
}

@article{Radford2021CLIP,
  title        = {Learning Transferable Visual Models From Natural Language Supervision},
  author       = {Radford, Alec and Kim, Jong Wook and Hallacy, Chris and Ramesh, Aditya and Goh, Gabriel and Agarwal, Sandhini and Sastry, Girish and Askell, Amanda and Mishkin, Pamela and Clark, Jack and Krueger, Gretchen and Sutskever, Ilya},
  journal      = {arXiv preprint arXiv:2103.00020},
  year         = {2021}
}

@inproceedings{Dosovitskiy2021ViT,
  title        = {An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale},
  author       = {Dosovitskiy, Alexey and Beyer, Lucas and Kolesnikov, Alexander and Weissenborn, Dirk and Zhai, Xiaohua and Unterthiner, Thomas and Dehghani, Mostafa and Minderer, Matthias and Heigold, Georg and Gelly, Sylvain and Uszkoreit, Jakob and Houlsby, Neil},
  booktitle    = {International Conference on Learning Representations (ICLR)},
  year         = {2021}
}

@article{hansen2001completely,
  title={Completely derandomized self-adaptation in evolution strategies},
  author={Hansen, Nikolaus and Ostermeier, Andreas},
  journal={Evolutionary Computation},
  volume={9},
  number={2},
  pages={159--195},
  year={2001},
  publisher={MIT Press}
}

@article{fayyad2024exploiting,
  title={Exploiting classifier inter-level features for efficient out-of-distribution detection},
  author={Fayyad, Jamil and Gupta, Kashish and Mahdian, Navid and Gruyer, Dominique and Najjaran, Homayoun},
  journal={Image and Vision Computing},
  volume={142},
  pages={104897},
  year={2024},
  publisher={Elsevier}
}

@inproceedings{fayyad2025lesiongen,
  title={LesionGen: A concept-guided diffusion model for dermatology image synthesis},
  author={Fayyad, Jamil and Bayasi, Nourhan and Yu, Ziyang and Najjaran, Homayoun},
  booktitle={MICCAI Workshop on Deep Generative Models},
  pages={3--12},
  year={2025},
  organization={Springer}
}