---
title: 'OrganAMNIST: Abdominal Imaging Benchmark'
url: https://www.emergentmind.com/topics/organamnist
type: topic
---

# OrganAMNIST: Abdominal Imaging Benchmark

OrganAMNIST is a MedMNIST/MedMNIST v2 medical-imaging benchmark that recent literature uses primarily for abdominal organ classification, while also treating it as a compact testbed for architectural inductive bias, representation transfer, federated learning, machine unlearning, conformal prediction, adversarial robustness, domain adaptation, quantum-classical learning, and optical image reconstruction. Most of the cited work describes OrganAMNIST as grayscale abdominal CT slices, whereas one machine-unlearning study describes it as axial abdominal MRI, so modality and related metadata are best interpreted paper-by-paper rather than as perfectly uniform across all uses [2509.14277], [2508.18509].

## 1. Dataset identity and reported specifications

Across the cited papers, OrganAMNIST is consistently framed as an 11-class single-label classification problem over small grayscale medical images drawn from MedMNIST or MedMNIST v2. Several papers report the same nominal dataset size and split—\(58{,}830\) total samples with \(34{,}561\) train, \(6{,}491\) validation, and \(17{,}778\) test—which is the configuration used in both hybrid quantum-classical classification and machine-unlearning studies [2509.14277], [2508.18509]. A conformal-prediction study instead reports \(58{,}850\) images with \(34{,}581\) train, \(6{,}491\) validation, and \(17{,}778\) test, making explicit that paper-specific reporting is not fully identical [2605.12917].

The label set is also stable in substance but not always in wording. One paper lists the 11 classes as Bladder, Femur-Left, Femur-Right, Heart, Kidney-Left, Kidney-Right, Liver, Lung-Left, Lung-Right, Pancreas, and Spleen [2605.12917]. Another lists right femoral head, heart, left femoral head, bladder, left kidney, right kidney, liver, left lung, right lung, spleen, and pancreas [2511.20245]. This suggests a consistent organ taxonomy with minor naming differences around the femoral classes.

Reported modality and resolution are more variable. OrganAMNIST is described as abdominal CT in multiple studies, including hybrid quantum-classical classification, structured ViT transfer, conformal prediction, artifact robustness, and multimode-fiber reconstruction [2509.14277], [2603.09109], [2510.06584], [2511.20245]. By contrast, the unlearning study describes it as containing axial slices from abdominal MRI scans [2508.18509]. Similarly, some papers use the MedMNIST-standard \(28\times 28\) grayscale images directly [2509.14277], some resize all inputs to \(64\times 64\) [2508.18509], and others upsample or convert to model-specific formats such as \(224\times 224\) RGB for ViT or ResNet pipelines [2308.09160], [2605.12917].

A particularly influential characterization comes from the compact-ViT literature, which places OrganAMNIST at the strongest end of a “spatial structure spectrum,” describing it as “stable abdominal anatomy” with spatial strength index 5 [2602.17929]. In that usage, OrganAMNIST is not merely an organ-label benchmark; it is an example of a regime in which spatial layout is consistently informative.

| Aspect | Reported values | Example source |
|---|---|---|
| Modality | Abdominal CT; axial abdominal MRI | [2509.14277], [2508.18509] |
| Class count | 11 classes | [2605.12917] |
| Common split | 34,561 / 6,491 / 17,778 | [2509.14277] |
| Alternate split report | 34,581 / 6,491 / 17,778 | [2605.12917] |
| Native-style input | \(28\times 28\) grayscale | [2509.14277] |
| Model-specific resizing | \(64\times 64\), \(224\times 224\), RGB conversion | [2508.18509], [2308.09160] |

## 2. Experimental roles across recent literature

OrganAMNIST has become a multi-role benchmark rather than a single-task dataset. Recent work uses it to probe whether spatial priors help or hurt, whether chest-X-ray pretraining transfers to abdominal CT, whether unlabeled artifact domains can be adapted to, whether uncertainty sets remain valid under attack, and whether quantum or hybrid optical systems can remain useful on medically structured data.

| Study | Setting | OrganAMNIST role |
|---|---|---|
| ZACH-ViT | Few-shot ViTs | Strong anatomical-prior regime |
| VIVID-Med | Cross-modality transfer | CT organ benchmark |
| SalUn | Machine unlearning | Medical privacy benchmark |
| FedPerfix | Personalized federated ViTs | Medical FL benchmark |
| Adaptive RAPS | Reliable set prediction | Primary radiology benchmark |
| HistoSpeckle-Net | MMF reconstruction | Structurally rich target images |

This breadth matters because different papers expose different properties of the dataset. In architecture papers, OrganAMNIST is usually a high-structure multi-class problem. In privacy and federated studies, it is a medically relevant dataset with enough size to support retraining, unlearning, and client partitioning. In uncertainty and robustness work, it functions as a compact but nontrivial abdominal-imaging domain where failure modes remain measurable. In inverse-imaging work, it becomes a source of anatomically rich targets whose internal textures and boundaries are difficult to reconstruct from degraded measurements [2602.17929], [2603.09109], [2508.18509], [2308.09160], [2605.12917], [2511.20245].

## 3. Spatial structure, transfer, and architectural inductive bias

A central result in the recent OrganAMNIST literature is that the dataset rewards spatially aware inductive bias more than permutation-invariant designs. In the ZACH-ViT study, OrganAMNIST is explicitly assigned to the “strong anatomical prior” regime. Under a strict few-shot protocol with 50 samples per class, fixed hyperparameters, batch size 16, learning rate \(1\times 10^{-4}\), AdamW, 23 epochs, and seeds \(\{3,5,7,11,13\}\), ZACH-ViT reaches \(0.416 \pm 0.037\) MacroF1 on OrganAMNIST, compared with \(0.455 \pm 0.029\) for Minimal-ViT and \(0.470 \pm 0.057\) for TransMIL [2602.17929]. The paper interprets this as evidence that removing positional embeddings and the \([CLS]\) token is less advantageous when “spatial relationships are diagnostically relevant.”

That interpretation aligns with OrganAMNIST’s repeated use as a transfer benchmark for structured visual representations. In VIVID-Med, a `vit_base_patch16_224` encoder pretrained only on chest X-rays with LLM-supervised structured semantics is frozen and evaluated by linear probing for 3,000 steps. On OrganAMNIST, this yields \(0.9969 \pm 0.0001\) macro-AUC and \(0.9322 \pm 0.0004\) macro-F1, exceeding ImageNet-supervised ViT at \(0.9928 \pm 0.0001\) macro-AUC and \(0.8846 \pm 0.0007\) macro-F1, and BiomedCLIP at \(0.9913 \pm 0.0002\) macro-AUC and \(0.8732 \pm 0.0052\) macro-F1 [2603.09109]. Here OrganAMNIST functions as evidence that structured supervision learned on chest radiographs can transfer to abdominal CT without CT pretraining.

Hybrid quantum-classical classification studies make a related point from a different direction. HQCNN, using a five-layer classical convolutional backbone plus a 4-qubit variational quantum circuit with angle embedding, cyclic \(U_3\), superpositional entanglement, and a Quantum Attention-Fourier layer, reports \(97.99\%\) accuracy and \(99.95\%\) AUC on the 11-class OrganAMNIST task [2509.14277]. Its ablation study shows that removing QAF reduces accuracy from \(97.99\) to \(97.15\) and AUC from \(99.95\) to \(97.90\), indicating that the quantum module’s most elaborate component contributes measurably on organ discrimination.

A separate hybrid QCNN paper uses only four OrganAMNIST classes, indexed \(0,3,7,8\), and shows that reusing discarded qubit measurements can markedly improve performance on this harder, class-imbalanced biomedical subset. In its best reported configuration, accuracy rises from \(69.13\%\) without discarded-qubit reuse to \(88.50\%\) with reuse, while F1 rises from \(64.36\%\) to \(88.46\%\) [2508.18161]. Although this is not the full 11-class setting, it reinforces the broader pattern: OrganAMNIST is repeatedly used to test whether a model captures structured anatomical information rather than only coarse appearance cues.

## 4. Privacy, federation, and distribution shift

OrganAMNIST has also become a compact benchmark for operational questions that go beyond standard supervised learning. In machine unlearning, a ResNet-18 trained for 200 epochs with learning rate \(0.1\), batch size \(256\), random crop, and horizontal flip is used to compare SalUn against full retraining under forgetting rates \(\delta_f=10\%\) and \(50\%\). At \(10\%\), retraining reaches \(96.37\%\) test accuracy and \(63.3\) minutes runtime, while SalUn reaches \(95.13\%\) test accuracy and \(2.8\) minutes runtime; at \(50\%\), retraining reaches \(95.93\%\) and SalUn \(94.99\%\), with runtime \(63.3\) versus \(3.5\) minutes [2508.18509]. OrganAMNIST is therefore one of the clearest medical-image cases in which approximate unlearning approaches full retraining while sharply reducing computation.

In personalized federated learning, OrganAMNIST serves as the medical-imaging benchmark for partial ViT personalization. FedPerfix partitions the dataset across \(N=64\) clients using a Dirichlet split with \(\alpha=0.5\), resizes inputs to \(224\times 224\) RGB, uses ViT-Small with patch size 16, runs 50 communication rounds with 10 local epochs and \(K=8\) sampled clients per round, and reports mean client-wise Top-1 accuracy [2308.09160]. On this setup, FedPerfix achieves \(93.17 \pm 3.51\), exceeding FedAvg at \(87.31 \pm 5.98\) and FedRep at \(92.63 \pm 3.77\). OrganAMNIST is thus used to show that self-attention and the classification head are sufficiently distribution-sensitive to justify local plugins.

Quantum federated learning uses a smaller OrganAMNIST subset but addresses a related heterogeneity problem. Q-RAIL employs 4,700 training samples and 1,000 test samples, reduces images by PCA to \(Q=4\) features, and trains a 4-qubit, 4-layer VQC across \(K=10\) clients for 15 rounds using SPSA. Under IID partitioning, Q-RAIL improves test accuracy from FedAvg’s \(0.650 \pm 0.051\) to \(0.704 \pm 0.018\); under non-IID partitioning, it improves from \(0.605 \pm 0.048\) to \(0.621 \pm 0.046\) [2605.25783]. In that paper, OrganAMNIST is the medical domain used to show that hardware-aware aggregation helps even when the task is more structured than MNIST.

Distribution shift caused by CT artifacts is another prominent use. A domain-adaptation study builds clean, uniform-noise, 90°-rotated, and ring-artifact versions of OrganAMNIST, then trains a ResNet-50-based DANN with a feature extractor \(G_f\), label head \(G_y\), domain classifier \(G_d\), and gradient reversal \(R_\lambda\). The total loss is
\[
\mathcal{L}
= \sum_i (1-d_i)\,\mathcal{L}_{\text{CE}}(\hat y_{i,:}, y_i)
+ \sum_i \mathcal{L}_{\text{BCE}}(\hat d_i, d_i),
\]
so only clean source samples contribute to supervised class loss, while both clean and artifact samples contribute to domain loss [2510.06584]. For ring-artifact adaptation, the best \(\lambda\) schedule is parabolic increasing, with validation accuracy \(0.987\). The paper’s main qualitative result is that baseline models trained only on clean images fail on ring-artifact test data, ordinary augmentation does not help on unseen artifact domains, and DANN with unlabeled artifact images attains ring-artifact performance comparable to models trained with labeled artifact images [2510.06584].

## 5. Reliability, conformal prediction, and adversarial robustness

OrganAMNIST is unusually prominent in recent reliability work because it exposes a tension between excellent average performance and localized failure. In adaptive conformal prediction, a ResNet-18 pretrained on ImageNet-1K and adapted to 11 classes reaches \(93.20\%\) test accuracy, yet standard RAPS tuned for minimal set size collapses to near-deterministic behavior. On OrganAMNIST, Naive and RAPS (Size) both have average set size \(1.00\) and coverage about \(0.932\), but RAPS (Size) has worst populated-stratum coverage \(0.600\), and RAPS (Temp) reduces that further to \(0.400\) [2605.12917]. The proposed Adaptive Lambda Criterion instead attains coverage \(0.9572\), average set size \(1.09\), singleton rate \(93.0\%\), and worst populated-stratum coverage \(0.943\). It also produces 1,244 multi-label predictions, compared with only 10 under RAPS (Size), and the paper reports a Spearman correlation \(\rho=-0.303\) with \(p<10^{-22}\) between Grad-CAM spatial entropy and prediction-set size, indicating that larger sets correspond to more focused attention on anatomically ambiguous regions [2605.12917].

A separate conformal-prediction paper studies OrganAMNIST under explicit adversarial attacks using a single-channel ResNet18 and APS scores. Under known PGD attack, the PGD-trained defensive model achieves coverage \(\approx 89.93\%\), size \(\approx 1.43\), SSCV \(\approx 0.04\), and accuracy \(\approx 83.96\%\), whereas the normal model retains similar coverage but expands to size \(\approx 8.91\) with accuracy \(\approx 14.86\%\) [2411.04376]. Under unknown attacks, conservative quantile calibration keeps robust-model set sizes around \(1.45\)–\(1.53\), while the normal model produces sets around \(8.92\)–\(9.52\). The paper’s game-theoretic analysis further concludes that the OrganAMNIST minimax defense often degenerates to a single robust model, frequently the PGD-trained ResNet18 [2411.04376].

Hybrid quantum-classical adversarial defense uses OrganAMNIST as its medical testbed. QShield compares a modified grayscale ResNet-18 with hybrid CNN-plus-PQC variants under FGSM, PGD, APGD, VMI-FGSM, C\&W \(L_2\), DeepFool, One-Pixel, and Square attacks. The classical CNN reaches clean ODR \(89.20\%\), while hybrid HQCNN variants remain close on clean performance and achieve lower attack success rates across attacks [2604.10933]. The best reported OrganAMNIST improvements include up to \(39.04\%\) absolute ASR reduction under C\&W and a relative robustness improvement of \(89.72\%\) under Square attack for HQCNN-Linear. The same study reports that adversarial-example generation becomes far more expensive against the hybrid models: on OrganAMNIST, C\&W requires \(0.209\) s/sample for the CNN but \(4.5\)–\(5.7\) s/sample for HQCNN variants, while Square attack rises from \(0.0448\) s/sample to \(7.45\)–\(9.75\) s/sample [2604.10933].

These papers collectively undermine two common shortcuts in reading OrganAMNIST results. First, near-saturated AUC or high global coverage does not guarantee robustness or reliable uncertainty. Second, strong clean accuracy does not imply compact or useful predictive sets under attack. OrganAMNIST repeatedly functions as the dataset on which those distinctions remain visible.

## 6. Beyond classification: inverse imaging, reconstruction, and benchmark significance

OrganAMNIST has also been used as a target distribution for optical inverse problems rather than only as a classification benchmark. HistoSpeckle-Net transmits OrganAMNIST images through a multimode fiber using an SLM and records output speckles under three bending configurations, creating 58,830 speckle–image pairs per configuration [2511.20245]. The generator combines a U-Net-like backbone, a Three-Scale Feature Refinement Module, histogram-based mutual-information loss, multiscale SSIM loss, and a PatchGAN discriminator. On a 5,883-image test set per configuration, HistoSpeckle-Net reaches average SSIM \(0.7240\), compared with \(0.6416\) for U-Net and \(0.5822\) for Pix2Pix; with only 15,000 training images, it still reaches \(0.6652\), compared with \(0.5643\) and \(0.5155\), and under combined perturbed-fiber training it maintains SSIM \(>0.64\) for all bending positions [2511.20245]. In this setting, OrganAMNIST is valued not for labels alone but for “rich structures,” “fine details,” organ boundaries, and internal textures that stress reconstruction fidelity.

The cumulative literature therefore presents OrganAMNIST as more than a small MedMNIST subset. It is a compact abdominal-imaging benchmark whose stable anatomy makes spatial priors measurable, whose ambiguities make calibrated uncertainty and adversarial robustness nontrivial, whose standardized format supports privacy and federated experiments, and whose structural richness is sufficient to test optical reconstruction and hybrid quantum models [2602.17929], [2605.12917], [2511.20245]. At the same time, several papers explicitly mark the limits of current conclusions: ZACH-ViT evaluates only a 50-shot-per-class regime [2602.17929]; adaptive conformal work notes that OrganAMNIST is low-resolution and that some uncertainty may be artifactual [2605.12917]; artifact-robustness experiments use synthetic rather than scanner-acquired ring artifacts [2510.06584]; and multimode-fiber reconstruction emphasizes that OrganAMNIST remains a curated 2D single-channel dataset rather than full clinical imaging complexity [2511.20245]. This suggests that OrganAMNIST is most informative when treated as a controlled, structurally meaningful benchmark whose research value lies in the precision with which different methodological assumptions can be isolated and compared.

Source: https://www.emergentmind.com/topics/organamnist