# SaTC: CORE: Small: Toward Adversarially Robust and Privacy-Preserving EHR Systems: Data Complexity and New Training Paradigms

> **NSF 01002526DB NSF RESEARCH & RELATED ACTIVIT** · Emory University (GA) · $540,000

## Abstract

Electronic Health Records (EHRs) have revolutionized modern healthcare by providing comprehensive digital repositories for patient data. The use of deep learning and the emerging foundation models has further enhanced the potential of EHRs, enabling high-precision tasks in digital medicine.  However, modeling EHR data to effectively support clinical decision-making is susceptible to both adversarial attacks and privacy breaches. The project’s novelties are its focus on addressing adversarial robustness and privacy concerns in modern EHR systems by tackling two key challenges: (1) the complex correlations in EHR data, including cross-feature, temporal, and cross-modality correlations, and (2) the security and privacy vulnerabilities introduced by the increasing use of pre-trained models in healthcare. The project's broader significance and importance are in safeguarding patient data and enhancing the overall security and privacy of medical infrastructures.

The project’s intellectual contributions include a comprehensive framework of attack strategies to assess system vulnerabilities and defense mechanisms to enhance robustness and privacy.  Specifically, it explores: (1) robustness with adversarial attacks and defenses that leverage EHR data correlations, as well as backdoor attacks exploiting pre-trained models and defenses utilizing test-time model fine-tuning; (2) privacy with partial knowledge attacks that exploit data correlations and countermeasures for both partial 

## Key facts

- **NSF award ID:** 2437345
- **Awardee organization:** Emory University (GA)
- **SAM.gov UEI:** S352L5PJLMP8
- **PI:** Li Xiong
- **Primary program:** 01002526DB NSF RESEARCH & RELATED ACTIVIT
- **All programs:** SaTC: Secure and Trustworthy Cyberspace, SMALL PROJECT
- **Estimated total:** $540,000
- **Funds obligated:** $540,000
- **Transaction type:** Standard Grant
- **Period:** 06/15/2025 → 05/31/2028

## Primary source

NSF Award Search: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2437345

## Citation

> US National Science Foundation, Award 2437345, SaTC: CORE: Small: Toward Adversarially Robust and Privacy-Preserving EHR Systems: Data Complexity and New Training Paradigms. Retrieved via AI Analytics 2026-06-06 from https://api.ai-analytics.org/grant/nsf/2437345. Licensed CC0.

---

*[NSF Awards dataset](/datasets/nsf-awards) · CC0 1.0*