@inproceedings{cohen2020limits,
  title={On the limits of cross-domain generalization in automated X-ray prediction},
  author={Cohen, Joseph Paul and Hashir, Mohammad and Brooks, Rupert and Bertrand, Hadrien},
  booktitle={Medical Imaging with Deep Learning},
  pages={136--155},
  year={2020},
  organization={PMLR}
}

@article{oakden2020exploring,
  title={Exploring large-scale public medical image datasets},
  author={Oakden-Rayner, Luke},
  journal={Academic radiology},
  volume={27},
  number={1},
  pages={106--112},
  year={2020},
  publisher={Elsevier}
}

@article{shih2019augmenting,
  title={Augmenting the national institutes of health chest radiograph dataset with expert annotations of possible pneumonia},
  author={Shih, George and Wu, Carol C and Halabi, Safwan S and Kohli, Marc D and Prevedello, Luciano M and Cook, Tessa S and Sharma, Arjun and Amorosa, Judith K and Arteaga, Veronica and Galperin-Aizenberg, Maya and others},
  journal={Radiology: Artificial Intelligence},
  volume={1},
  number={1},
  pages={e180041},
  year={2019},
  publisher={Radiological Society of North America}
}

@article{englesson2021consistency,
  title={Consistency regularization can improve robustness to label noise},
  author={Englesson, Erik and Azizpour, Hossein},
  journal={arXiv preprint arXiv:2110.01242},
  year={2021}
}

@article{seyyed2021underdiagnosis,
  title={Underdiagnosis bias of artificial intelligence algorithms applied to chest radiographs in under-served patient populations},
  author={Seyyed-Kalantari, Laleh and Zhang, Haoran and McDermott, Matthew BA and Chen, Irene Y and Ghassemi, Marzyeh},
  journal={Nature medicine},
  volume={27},
  number={12},
  pages={2176--2182},
  year={2021},
  publisher={Nature Publishing Group US New York}
}

@article{rolnick2017deep,
  title={Deep learning is robust to massive label noise},
  author={Rolnick, David and Veit, Andreas and Belongie, Serge and Shavit, Nir},
  journal={arXiv preprint arXiv:1705.10694},
  year={2017}
}

@article{finlayson2018adversarial,
  title={Adversarial attacks against medical deep learning systems},
  author={Finlayson, Samuel G and Chung, Hyung Won and Kohane, Isaac S and Beam, Andrew L},
  journal={arXiv preprint arXiv:1804.05296},
  year={2018}
}

@inproceedings{wang2021fair,
  title={Fair classification with group-dependent label noise},
  author={Wang, Jialu and Liu, Yang and Levy, Caleb},
  booktitle={Proceedings of the 2021 ACM conference on fairness, accountability, and transparency},
  pages={526--536},
  year={2021}
}

@inproceedings{wang2022towards,
  title={Towards intersectionality in machine learning: Including more identities, handling underrepresentation, and performing evaluation},
  author={Wang, Angelina and Ramaswamy, Vikram V and Russakovsky, Olga},
  booktitle={Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency},
  pages={336--349},
  year={2022}
}

@inproceedings{zhang2022improving,
  title={Improving the fairness of chest x-ray classifiers},
  author={Zhang, Haoran and Dullerud, Natalie and Roth, Karsten and Oakden-Rayner, Lauren and Pfohl, Stephen and Ghassemi, Marzyeh},
  booktitle={Conference on Health, Inference, and Learning},
  pages={204--233},
  year={2022},
  organization={PMLR}
}

@inproceedings{zietlow2022leveling,
  title={Leveling down in computer vision: Pareto inefficiencies in fair deep classifiers},
  author={Zietlow, Dominik and Lohaus, Michael and Balakrishnan, Guha and Kleindessner, Matth{\"a}us and Locatello, Francesco and Sch{\"o}lkopf, Bernhard and Russell, Chris},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={10410--10421},
  year={2022}
}

@article{chang2020adversarial,
  title={On adversarial bias and the robustness of fair machine learning},
  author={Chang, Hongyan and Nguyen, Ta Duy and Murakonda, Sasi Kumar and Kazemi, Ehsan and Shokri, Reza},
  journal={arXiv preprint arXiv:2006.08669},
  year={2020}
}

@inproceedings{liao2023social,
  title={Social bias meets data bias: The impacts of labeling and measurement errors on fairness criteria},
  author={Liao, Yiqiao and Naghizadeh, Parinaz},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={37},
  pages={8764--8772},
  year={2023}
}

@inproceedings{chang2022disparate,
  title={Disparate Censorship \& Undertesting: A Source of Label Bias in Clinical Machine Learning},
  author={Chang, Trenton and Sjoding, Michael W and Wiens, Jenna},
  booktitle={Machine Learning for Healthcare Conference},
  pages={343--390},
  year={2022},
  organization={PMLR}
}

@inproceedings{jiang2020identifying,
  title={Identifying and correcting label bias in machine learning},
  author={Jiang, Heinrich and Nachum, Ofir},
  booktitle={International Conference on Artificial Intelligence and Statistics},
  pages={702--712},
  year={2020},
  organization={PMLR}
}

@inproceedings{dai2020label,
  title={Label bias, label shift: Fair machine learning with unreliable labels},
  author={Dai, Jessica and Brown, Sarah M},
  booktitle={NeurIPS 2020 Workshop on Consequential Decision Making in Dynamic Environments},
  volume={12},
  year={2020}
}

@article{wei2021open,
  title={Open-set label noise can improve robustness against inherent label noise},
  author={Wei, Hongxin and Tao, Lue and Xie, Renchunzi and An, Bo},
  journal={Advances in Neural Information Processing Systems},
  volume={34},
  pages={7978--7992},
  year={2021}
}

@inproceedings{wang2023mitigating,
  title={Mitigating algorithmic bias with limited annotations},
  author={Wang, Guanchu and Du, Mengnan and Liu, Ninghao and Zou, Na and Hu, Xia},
  booktitle={Joint European Conference on Machine Learning and Knowledge Discovery in Databases},
  pages={241--258},
  year={2023},
  organization={Springer}
}

@article{jha2023label,
  title={Label poisoning is all you need},
  author={Jha, Rishi D and Hayase, Jonathan and Oh, Sewoong},
  journal={arXiv preprint arXiv:2310.18933},
  year={2023}
}

@inproceedings{wang2017chestx,
  title={Chestx-ray8: Hospital-scale chest x-ray database and benchmarks on weakly-supervised classification and localization of common thorax diseases},
  author={Wang, Xiaosong and Peng, Yifan and Lu, Le and Lu, Zhiyong and Bagheri, Mohammadhadi and Summers, Ronald M},
  booktitle={Proceedings of the IEEE conference on computer vision and pattern recognition},
  pages={2097--2106},
  year={2017}
}

@article{irmakci2024tissue,
  title={Tissue contamination challenges the credibility of machine learning models in real world digital pathology},
  author={Irmakci, Ismail and Nateghi, Ramin and Zhou, Rujoi and Vescovo, Mariavittoria and Saft, Madeline and Ross, Ashley E and Yang, Ximing J and Cooper, Lee AD and Goldstein, Jeffery A},
  journal={Modern Pathology},
  pages={100422},
  year={2024},
  publisher={Elsevier}
}

@article{bekker2020learning,
  title={Learning from positive and unlabeled data: A survey},
  author={Bekker, Jessa and Davis, Jesse},
  journal={Machine Learning},
  volume={109},
  pages={719--760},
  year={2020},
  publisher={Springer}
}

@article{bachina2023coarse,
  title={Coarse race and ethnicity labels mask granular underdiagnosis disparities in deep learning models for chest radiograph diagnosis},
  author={Bachina, Preetham and Garin, Sean P and Kulkarni, Pranav and Kanhere, Adway and Sulam, Jeremias and Parekh, Vishwa S and Yi, Paul H},
  journal={Radiology},
  volume={309},
  number={2},
  pages={e231693},
  year={2023},
  publisher={Radiological Society of North America}
}

@article{beheshtian2022generalizability,
  title={Generalizability and bias in a deep learning pediatric bone age prediction model using hand radiographs},
  author={Beheshtian, Elham and Putman, Kristin and Santomartino, Samantha M and Parekh, Vishwa S and Yi, Paul H},
  journal={Radiology},
  volume={306},
  number={2},
  pages={e220505},
  year={2022},
  publisher={Radiological Society of North America}
}

@inproceedings{pooch2020can,
  title={Can we trust deep learning based diagnosis? the impact of domain shift in chest radiograph classification},
  author={Pooch, Eduardo HP and Ballester, Pedro and Barros, Rodrigo C},
  booktitle={Thoracic Image Analysis: Second International Workshop, TIA 2020, Held in Conjunction with MICCAI 2020, Lima, Peru, October 8, 2020, Proceedings 2},
  pages={74--83},
  year={2020},
  organization={Springer}
}

@article{yao2019strong,
  title={A strong baseline for domain adaptation and generalization in medical imaging},
  author={Yao, Li and Prosky, Jordan and Covington, Ben and Lyman, Kevin},
  journal={arXiv preprint arXiv:1904.01638},
  year={2019}
}

@inproceedings{seyyed2020chexclusion,
  title={CheXclusion: Fairness gaps in deep chest X-ray classifiers},
  author={Seyyed-Kalantari, Laleh and Liu, Guanxiong and McDermott, Matthew and Chen, Irene Y and Ghassemi, Marzyeh},
  booktitle={BIOCOMPUTING 2021: proceedings of the Pacific symposium},
  pages={232--243},
  year={2020},
  organization={World Scientific}
}

@article{glocker2023risk,
  title={Risk of bias in chest radiography deep learning foundation models},
  author={Glocker, Ben and Jones, Charles and Roschewitz, M{\'e}lanie and Winzeck, Stefan},
  journal={Radiology: Artificial Intelligence},
  volume={5},
  number={6},
  pages={e230060},
  year={2023},
  publisher={Radiological Society of North America}
}

@article{busby2018bias,
  title={Bias in radiology: the how and why of misses and misinterpretations},
  author={Busby, Lindsay P and Courtier, Jesse L and Glastonbury, Christine M},
  journal={Radiographics},
  volume={38},
  number={1},
  pages={236--247},
  year={2018},
  publisher={Radiological Society of North America}
}

@article{gichoya2023aipitfalls,
  title={AI pitfalls and what not to do: mitigating bias in AI},
  author={Gichoya, Judy Wawira and Thomas, Kaesha and Celi, Leo Anthony and Safdar, Nabile and Banerjee, Imon and Banja, John D and Seyyed-Kalantari, Laleh and Trivedi, Hari and Purkayastha, Saptarshi},
  journal={The British Journal of Radiology},
  volume={96},
  number={1150},
  pages={20230023},
  year={2023},
  publisher={Oxford University Press}
}

@article{garin2023medical,
  title={Medical imaging data science competitions should report dataset demographics and evaluate for bias},
  author={Garin, Sean P and Parekh, Vishwa S and Sulam, Jeremias and Yi, Paul H},
  journal={Nature medicine},
  volume={29},
  number={5},
  pages={1038--1039},
  year={2023},
  publisher={Nature Publishing Group US New York}
}

@article{driessen2023sociodemographic,
  title={Sociodemographic Variables Reporting in Human Radiology Artificial Intelligence Research},
  author={Driessen, Rebecca and Bhatia, Neil and Gichoya, Judy Wawira and Safdar, Nabile M and Balthazar, Patricia},
  journal={Journal of the American College of Radiology},
  year={2023},
  publisher={Elsevier}
}

@article{miller2020adversarial,
  title={Adversarial learning targeting deep neural network classification: A comprehensive review of defenses against attacks},
  author={Miller, David J and Xiang, Zhen and Kesidis, George},
  journal={Proceedings of the IEEE},
  volume={108},
  number={3},
  pages={402--433},
  year={2020},
  publisher={IEEE}
}

@article{li2022deep,
  title={Deep learning prediction of sex on chest radiographs: a potential contributor to biased algorithms},
  author={Li, David and Lin, Cheng Ting and Sulam, Jeremias and Yi, Paul H},
  journal={Emergency Radiology},
  volume={29},
  number={2},
  pages={365--370},
  year={2022},
  publisher={Springer}
}

@article{adleberg2022predicting,
  title={Predicting patient demographics from chest radiographs with deep learning},
  author={Adleberg, Jason and Wardeh, Amr and Doo, Florence X and Marinelli, Brett and Cook, Tessa S and Mendelson, David S and Kagen, Alexander},
  journal={Journal of the American College of Radiology},
  volume={19},
  number={10},
  pages={1151--1161},
  year={2022},
  publisher={Elsevier}
}

@article{yi2021radiology,
  title={Radiology “forensics”: determination of age and sex from chest radiographs using deep learning},
  author={Yi, Paul H and Wei, Jinchi and Kim, Tae Kyung and Shin, Jiwon and Sair, Haris I and Hui, Ferdinand K and Hager, Gregory D and Lin, Cheng Ting},
  journal={Emergency Radiology},
  volume={28},
  pages={949--954},
  year={2021},
  publisher={Springer}
}

@article{zong2022medfair,
  title={MEDFAIR: Benchmarking fairness for medical imaging},
  author={Zong, Yongshuo and Yang, Yongxin and Hospedales, Timothy},
  journal={arXiv preprint arXiv:2210.01725},
  year={2022}
}

@article{gichoya2022airecog,
  title={AI recognition of patient race in medical imaging: a modelling study},
  author={Gichoya, Judy Wawira and Banerjee, Imon and Bhimireddy, Ananth Reddy and Burns, John L and Celi, Leo Anthony and Chen, Li-Ching and Correa, Ramon and Dullerud, Natalie and Ghassemi, Marzyeh and Huang, Shih-Cheng and others},
  journal={The Lancet Digital Health},
  volume={4},
  number={6},
  pages={e406--e414},
  year={2022},
  publisher={Elsevier}
}

@inproceedings{zhang2020hurtful,
  title={Hurtful words: quantifying biases in clinical contextual word embeddings},
  author={Zhang, Haoran and Lu, Amy X and Abdalla, Mohamed and McDermott, Matthew and Ghassemi, Marzyeh},
  booktitle={proceedings of the ACM Conference on Health, Inference, and Learning},
  pages={110--120},
  year={2020}
}

@inproceedings{irvin2019chexpert,
  title={Chexpert: A large chest radiograph dataset with uncertainty labels and expert comparison},
  author={Irvin, Jeremy and Rajpurkar, Pranav and Ko, Michael and Yu, Yifan and Ciurea-Ilcus, Silviana and Chute, Chris and Marklund, Henrik and Haghgoo, Behzad and Ball, Robyn and Shpanskaya, Katie and others},
  booktitle={Proceedings of the AAAI conference on artificial intelligence},
  volume={33},
  pages={590--597},
  year={2019}
}

@article{johnson2019mimic,
  title={MIMIC-CXR-JPG, a large publicly available database of labeled chest radiographs},
  author={Johnson, Alistair EW and Pollard, Tom J and Greenbaum, Nathaniel R and Lungren, Matthew P and Deng, Chih-ying and Peng, Yifan and Lu, Zhiyong and Mark, Roger G and Berkowitz, Seth J and Horng, Steven},
  journal={arXiv preprint arXiv:1901.07042},
  year={2019}
}

@article{chen2018detecting,
  title={Detecting backdoor attacks on deep neural networks by activation clustering},
  author={Chen, Bryant and Carvalho, Wilka and Baracaldo, Nathalie and Ludwig, Heiko and Edwards, Benjamin and Lee, Taesung and Molloy, Ian and Srivastava, Biplav},
  journal={arXiv preprint arXiv:1811.03728},
  year={2018}
}

@article{tran2018spectral,
  title={Spectral signatures in backdoor attacks},
  author={Tran, Brandon and Li, Jerry and Madry, Aleksander},
  journal={Advances in neural information processing systems},
  volume={31},
  year={2018}
}

@inproceedings{hayase2021spectre,
  title={Spectre: Defending against backdoor attacks using robust statistics},
  author={Hayase, Jonathan and Kong, Weihao and Somani, Raghav and Oh, Sewoong},
  booktitle={International Conference on Machine Learning},
  pages={4129--4139},
  year={2021},
  organization={PMLR}
}