.png){kind=icon}
返回
Active poisoning: efficient backdoor attacks on transfer learning-based brain-computer interfaces
.png){kind=icon}
PRE
AI
DOI：10.1007/s11432-022-3548-2.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Transfer learning (TL) has been widely used in electroencephalogram (EEG)-based brain-computer interfaces (BCIs) for reducing calibration efforts. However, backdoor attacks could be introduced through TL. In such attacks, an attacker embeds a backdoor with a specific pattern into the machine learning model. As a result, the model will misclassify a test sample with the backdoor trigger into a prespecified class while still maintaining good performance on benign samples. Accordingly, this study explores backdoor attacks in the TL of EEG-based BCIs, where source-domain data are poisoned by a backdoor trigger and then used in TL. We propose several active poisoning approaches to select source-domain samples, which are most effective in embedding the backdoor pattern, to improve the attack success rate and efficiency. Experiments on four EEG datasets and three deep learning models demonstrate the effectiveness of the approaches. To our knowledge, this is the first study about backdoor attacks on TL models in EEG-based BCIs. It exposes a serious security risk in BCIs, which should be immediately addressed.
Keyword:
brain-computer interface
electroencephalogram
transfer learning
poisoning attack
backdoor attack
期刊
IF:
7.6
论文数:
4.9K
被引数:
8.9K
机构
暂无机构信息
引用论文
.png){kind=icon}
Internal Feature Selection Method of CSP Based on L1-Norm and Dempster-Shafer Theory基于L1-Norm和dempster-shafer理论的CSP内部特征选择方法
OAAI
OAAI分享收藏分享收藏分享收藏分享收藏
查看更多内容