{"id":"https://openalex.org/W7204104848","doi":"https://doi.org/10.21203/rs.3.rs-10416892/v1","title":"Visual distinctiveness drives memorization beyond rarity in fine-tuned medical imaging models","display_name":"Visual distinctiveness drives memorization beyond rarity in fine-tuned medical imaging models","publication_year":2026,"publication_date":"2026-08-24","ids":{"openalex":"https://openalex.org/W7204104848","doi":"https://doi.org/10.21203/rs.3.rs-10416892/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-10416892/v1","doi":"https://doi.org/10.21203/rs.3.rs-10416892/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10416892/v1","pdf_url":"https://www.researchsquare.com/article/rs-10416892/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.researchsquare.com/article/rs-10416892/latest.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116196733","display_name":"Santhosh Parampottupadam","orcid":"https://orcid.org/0009-0009-9401-887X","observed_orcids":["https://orcid.org/0009-0009-9401-887X"]},"institutions":[{"id":"https://openalex.org/I17937529","display_name":"German Cancer Research Center","ror":"https://ror.org/04cdgtt98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I17937529"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Santhosh Parampottupadam","raw_affiliation_strings":["German Cancer Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Cancer Research Center","institution_ids":["https://openalex.org/I17937529"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025665736","display_name":"Sinem Sav","orcid":"https://orcid.org/0000-0001-9096-8768","observed_orcids":["https://orcid.org/0000-0001-9096-8768"]},"institutions":[{"id":"https://openalex.org/I168864056","display_name":"Bilkent University","ror":"https://ror.org/02vh8a032","country_code":"TR","type":"education","lineage":["https://openalex.org/I168864056"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Sinem Sav","raw_affiliation_strings":["Bilkent University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bilkent University","institution_ids":["https://openalex.org/I168864056"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076157815","display_name":"Dimitrios Bounias","orcid":"https://orcid.org/0000-0002-3361-1698","observed_orcids":["https://orcid.org/0000-0002-3361-1698"]},"institutions":[{"id":"https://openalex.org/I17937529","display_name":"German Cancer Research Center","ror":"https://ror.org/04cdgtt98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I17937529"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dimitrios Bounias","raw_affiliation_strings":["German Cancer Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Cancer Research Center","institution_ids":["https://openalex.org/I17937529"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101835235","display_name":"Saikat Roy","orcid":"https://orcid.org/0000-0002-0809-6524","observed_orcids":["https://orcid.org/0000-0002-0809-6524"]},"institutions":[{"id":"https://openalex.org/I17937529","display_name":"German Cancer Research Center","ror":"https://ror.org/04cdgtt98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I17937529"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Saikat Roy","raw_affiliation_strings":["German Cancer Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Cancer Research Center","institution_ids":["https://openalex.org/I17937529"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027292126","display_name":"Klaus Hermann Maier-Hein","orcid":"https://orcid.org/0000-0002-6626-2463","observed_orcids":["https://orcid.org/0000-0002-6626-2463"]},"institutions":[{"id":"https://openalex.org/I17937529","display_name":"German Cancer Research Center","ror":"https://ror.org/04cdgtt98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I17937529"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Klaus Maier-Hein","raw_affiliation_strings":["German Cancer Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Cancer Research Center","institution_ids":["https://openalex.org/I17937529"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044067668","display_name":"Adam Dziedzic","orcid":"https://orcid.org/0000-0001-9786-2296","observed_orcids":["https://orcid.org/0000-0001-9786-2296"]},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Adam Dziedzic","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039583147","display_name":"Franziska Boenisch","orcid":"https://orcid.org/0000-0002-2111-2234","observed_orcids":["https://orcid.org/0000-0002-2111-2234"]},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Franziska Boenisch","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056850855","display_name":"Ralf Omar Floca","orcid":"https://orcid.org/0000-0003-3218-3377","observed_orcids":["https://orcid.org/0000-0003-3218-3377"]},"institutions":[{"id":"https://openalex.org/I17937529","display_name":"German Cancer Research Center","ror":"https://ror.org/04cdgtt98","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I17937529"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ralf Floca","raw_affiliation_strings":["German Cancer Research Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Cancer Research Center","institution_ids":["https://openalex.org/I17937529"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5116196733"],"corresponding_institution_ids":["https://openalex.org/I17937529"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7846999764442444,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7846999764442444,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.08290000259876251,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.04280000180006027,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/memorization","display_name":"memorization","score":0.5979999899864197},{"id":"https://openalex.org/keywords/membership-inference-attacks","display_name":"membership inference attacks","score":0.9440000057220459},{"id":"https://openalex.org/keywords/rare-classes","display_name":"rare classes","score":0.6010000109672546},{"id":"https://openalex.org/keywords/visual-distinctiveness","display_name":"visual distinctiveness","score":0.8759999871253967},{"id":"https://openalex.org/keywords/skin-lesion-classification","display_name":"skin lesion classification","score":0.7210000157356262},{"id":"https://openalex.org/keywords/medsam","display_name":"MedSAM","score":0.48399999737739563},{"id":"https://openalex.org/keywords/biomedclip","display_name":"BiomedCLIP","score":0.734000027179718}],"concepts":[{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.8345000147819519},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.6129000186920166},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.5979999899864197},{"id":"https://openalex.org/C47385372","wikidata":"https://www.wikidata.org/wiki/Q7098943","display_name":"Optimal distinctiveness theory","level":2,"score":0.579800009727478},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.517799973487854},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4821999967098236},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.43810001015663147},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3720000088214874},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.33980000019073486},{"id":"https://openalex.org/C64357122","wikidata":"https://www.wikidata.org/wiki/Q1149766","display_name":"Causality (physics)","level":2,"score":0.31060001254081726},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.301800012588501},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.3010999858379364},{"id":"https://openalex.org/C31601959","wikidata":"https://www.wikidata.org/wiki/Q931309","display_name":"Medical imaging","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.29809999465942383},{"id":"https://openalex.org/C9719361","wikidata":"https://www.wikidata.org/wiki/Q7928967","display_name":"Vignette","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.27309998869895935},{"id":"https://openalex.org/C158600405","wikidata":"https://www.wikidata.org/wiki/Q5054566","display_name":"Causal inference","level":2,"score":0.2612000107765198},{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.259799987077713}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-10416892/v1","doi":"https://doi.org/10.21203/rs.3.rs-10416892/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10416892/v1","pdf_url":"https://www.researchsquare.com/article/rs-10416892/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-10416892/v1","doi":"https://doi.org/10.21203/rs.3.rs-10416892/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10416892/v1","pdf_url":"https://www.researchsquare.com/article/rs-10416892/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204104848.pdf","grobid_xml":"https://content.openalex.org/works/W7204104848.grobid-xml"},"referenced_works_count":2,"referenced_works":["https://openalex.org/W2982467521","https://openalex.org/W3203254411"],"related_works":["https://openalex.org/W7150865998","https://openalex.org/W4415428108","https://openalex.org/W7104182912","https://openalex.org/W7221811966","https://openalex.org/W7202373301","https://openalex.org/W4385573004","https://openalex.org/W6891897376","https://openalex.org/W7172115092","https://openalex.org/W4281764334","https://openalex.org/W7146609532"],"abstract_inverted_index":{"Abstract":[0],"Medical":[1],"AI":[2],"models":[3],"trained":[4],"on":[5,80],"patient":[6],"data":[7],"can":[8],"memorize":[9],"individual":[10],"samples,exposing":[11],"them":[12],"to":[13],"membership":[14,95],"inference":[15,96],"attacks.":[16],"Long-tail":[17],"theory":[18],"predicts":[19,90,94],"rareexamples":[20],"require":[21],"memorization,":[22],"yet":[23],"rarity":[24],"alone":[25],"is":[26,34],"insufficient:":[27],"in":[28],"a":[29,126],"skin-lesiondataset,":[30],"the":[31,38,60,74,118],"rarest":[32,49],"class":[33,50],"less":[35],"vulnerable":[36,120],"than":[37],"commoner":[39],"ones.":[40],"Under":[41],"ran-domly":[42],"initialised":[43],"(MAE)":[44],"and":[45,56,85,103],"medical-image-pretrained":[46],"(MedSAM)":[47],"encoders,the":[48],"stays":[51],"most":[52,119],"memorized,":[53],"but":[54],"ImageNet-":[55],"vision\u2013language-pretrained":[57],"encoders":[58],"re-rank":[59],"tail":[61],"toward":[62],"visually":[63],"distinctive":[64],"classes.":[65],"Across":[66],"fivedatasets,":[67],"controlled":[68],"grayscale":[69],"manipulation":[70],"gives":[71],"causal":[72],"evidence:":[73],"same":[75],"trans-form":[76],"produces":[77],"opposite":[78],"effects":[79],"two":[81],"equally":[82],"rare":[83],"classes,":[84],"an":[86,138],"independentfeature-space":[87],"atypicality":[88],"measure":[89],"memorization":[91,122],"across":[92],"architectures.Memorization":[93],"vulnerability":[97],"(\u03c1":[98],"=":[99,115],"0.36\u20130.77,p":[100],"<":[101],"0.001),":[102],"medical-domain":[104],"pretraining":[105],"(MedSAM,":[106],"BiomedCLIP)":[107],"does":[108],"notreduce":[109],"rare-class":[110],"risk.":[111],"DP-LoRA":[112],"at":[113],"\u03b5":[114],"1":[116],"reduces":[117],"class\u2019s":[121],"by":[123],"90%":[124],"versus":[125],"LoRA-only":[127],"baseline,":[128],"with":[129],"modest":[130],"accuracy":[131],"coston":[132],"simple":[133],"tasks.":[134],"We":[135],"release":[136],"medmem,":[137],"open-source":[139],"memorization-auditing":[140],"tool.":[141]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-08-25T00:00:00"}