ABSTRACT
EEG-based Brain-Computer-Interfaces are becoming available as consumer-grade devices, used in applications from gaming to learning programs with neuro-feedback loops. While enabling attractive applications, their proliferation introduces novel privacy concerns and security threats. One such example are attacks in which adversaries compromise EEG-based BCI devices and analyze the user's brain activity in order to infer private information such as their bank or area-of-living.
In this paper, we propose and analyze a more serious threat - a subliminal attack in which, given that the visual probing lasts for less than 13.3 milliseconds, the existence of any stimulus is below ones cognitive perception. We show that even under such limitation, the attacker can still analyze subliminal brain activity in response to the rapid visual stimuli and consequently infer private information about the user.
By running a proof-of-concept study with 27 participants, we experimentally evaluate the feasibility of subliminal attacks using EEG-based BCI devices. While not perfect, our results show that it is indeed feasible for attackers to subliminally learn probabilistic information about their victims.
- SmartBrain Technologies, "http://www.smartbraintech.com/store/pc/allattention-brain-exercisers-c9.htm."Google Scholar
- Emotiv Systems, "www.emotiv.com."Google Scholar
- Emotiv's App Store, "http://www.emotiv.com/store/app.php."Google Scholar
- I. Martinovic, D. Davies, M. Frank, D. Perito, T. Ros, and D. Song, "On the feasibility of side-channel attacks with brain-computer interfaces," in 21st USENIX Security Symposium. USENIX Association, Aug 2012.Google Scholar
- J. C. Karremans,W. Stroebe, and J. Claus, "Beyond vicary's fantasies: The impact of subliminal priming and brand choice," Journal of Experimental Social Psychology, vol. 42, no. 6, pp. 792--798, 2006.Google ScholarCross Ref
- T. Carlson and J. Del R. Millan, "Brain-controlled wheelchairs: A robotic architecture," IEEE Robotics and Automation Magazine, vol. 20, no. 1, pp. 65--73, 2013. Google ScholarCross Ref
- U. Hoffmann, G. Garcia, J.-M. Vesin, K. Diserens, and T. Ebrahimi, "A boosting approach to P300 detection with application to brain-computer interfaces," in 2nd International IEEE EMBS Conference on Neural Engineering, 2005, pp. 97--100. Google ScholarCross Ref
- L. a. Farwell and S. S. Smith, "Using brain MERMER testing to detect knowledge despite efforts to conceal." Journal of forensic sciences, vol. 46, no. 1, pp. 135--43, 2001. Google ScholarCross Ref
- J. C. Karremans, W. Stroebe, and J. Claus, "Beyond Vicary's fantasies: The impact of subliminal priming and brand choice," Journal of Experimental Social Psychology, vol. 42, no. 6, pp. 792--798, 2006. Google ScholarCross Ref
- Nick Epley, "Laboratory manual: Science or science fiction? investigating the possibility (and plausibility) of subliminal persuasion."Google Scholar
- S. Brostoff and M. Sasse, "Are passfaces more usable than passwords? a field trial investigation," in People and Computers XIV - Usability or Else!, S. McDonald, Y. Waern, and G. Cockton, Eds. Springer London, 2000, pp. 405--424. Google ScholarCross Ref
- P. Dunphy, A. Fitch, and P. Olivier, "Gaze-contingent passwords at the atm," in 4th Conference on Communication by Gaze Interaction (COGAIN), 2008.Google Scholar
- "http://www.facebook.com/help/search/?q=security+verification."Google Scholar
- E. Bernat, S. Bunce, and H. Shevrin, "Event-related brain potentials differentiate positive and negative mood adjectives during both supraliminal and subliminal visual processing," International Journal of Psychophysiology, vol. 42, no. 1, pp. 11--34, 2001. Google ScholarCross Ref
- B. J. Liddell, L. M. Williams, J. Rathjen, H. Shevrin, and E. Gordon, "A temporal dissociation of subliminal versus supraliminal fear perception: An event-related potential study," J. Cognitive Neuroscience, vol. 16, no. 3, pp. 479--486, Apr. 2004. Google ScholarDigital Library
- BioSemi, "www.biosemi.com."Google Scholar
- Neurobehavioral Systems, Inc., "http://www.neurobs.com/."Google Scholar
Index Terms
- Using EEG-Based BCI Devices to Subliminally Probe for Private Information
Recommendations
An EEG-Based BCI System to Facial Action Recognition
Brain---computer interface (BCI) has created a new era in neuroscience. It has improved the life quality of severely disabled patients. It allows them to regain the power of executing will by their cognitive, expressive and affective brain activities. ...
Towards Successful Multi-user Brain-Computer Interface (BCI) Gaming: Analysis of the EEG Signatures and Connectivity
CHIRA 2019: Proceedings of the 3rd International Conference on Computer-Human Interaction Research and ApplicationsThe information related to the impact of multi-user BCI on cortical activity is still relatively limited. This ongoing study performed a competitive multi-user BCI gaming that is based on alpha band operant conditioning and explored the brain activity ...
EEG-based BCI and video games: a progress report
This paper presents a systematic review of electroencephalography (EEG)-based brain---computer interfaces (BCIs) used in the video games, a vibrant field of research that touches upon all relevant questions concerning the future directions of BCI. The ...
Comments