Active Learning for Black-Box Adversarial Attacks in EEG-Based Brain-Computer Interfaces

作者: Xue Jiang , Xiao Zhang , Dongrui Wu

DOI: 10.1109/SSCI44817.2019.9002719

关键词: Black box (phreaking)Convolutional neural networkActive learning (machine learning)TransferabilityArtificial intelligenceElectroencephalographyComputer scienceDeep learningMachine learningAdversarial systemBrain–computer interface

摘要: Deep learning has made significant breakthroughs in many fields, including electroencephalogram (EEG) based brain-computer interfaces (BCIs). However, deep models are vulnerable to adversarial attacks, which deliberately designed small perturbations added the benign input samples fool model and degrade its performance. This paper considers transferability-based black-box where attacker trains a substitute approximate target model, then generates examples from attack model. Learning good is critical success of these but it requires large number queries We propose novel framework uses query synthesis active improve efficiency i n t raining Experiments on three convolutional neural network (CNN) classifiers EEG datasets demonstrated that our method can rate with same queries, or, other words, fewer achieve desired To knowledge, this first work integrates attacks for EEG-based BCIs.

参考文章(41)
Diederik P. Kingma, Jimmy Ba, Adam: A Method for Stochastic Optimization arXiv: Learning. ,(2014)
Liantao Wang, Xuelei Hu, Bo Yuan, Jianfeng Lu, Active learning via query synthesis and nearest neighbour search Neurocomputing. ,vol. 147, pp. 426- 434 ,(2015) , 10.1016/J.NEUCOM.2014.06.042
S. Sutton, M. Braren, J. Zubin, E. R. John, Evoked-Potential Correlates of Stimulus Uncertainty Science. ,vol. 150, pp. 1187- 1188 ,(1965) , 10.1126/SCIENCE.150.3700.1187
Ulrich Hoffmann, Jean-Marc Vesin, Touradj Ebrahimi, Karin Diserens, An efficient P300-based brain-computer interface for disabled subjects. Journal of Neuroscience Methods. ,vol. 167, pp. 115- 125 ,(2008) , 10.1016/J.JNEUMETH.2007.03.005
L.A. Farwell, E. Donchin, Talking off the top of your head: toward a mental prosthesis utilizing event-related brain potentials Electroencephalography and Clinical Neurophysiology. ,vol. 70, pp. 510- 523 ,(1988) , 10.1016/0013-4694(88)90149-6
Bernhard Graimann, Brendan Allison, Gert Pfurtscheller, Brain-Computer Interfaces: A Gentle Introduction balkan conference in informatics. pp. 1- 27 ,(2009) , 10.1007/978-3-642-02091-9_1
Ross D. King, Jem Rowland, Stephen G. Oliver, Michael Young, Wayne Aubrey, Emma Byrne, Maria Liakata, Magdalena Markham, Pinar Pir, Larisa N. Soldatova, Andrew Sparkes, Kenneth E. Whelan, Amanda Clare, The Automation of Science Science. ,vol. 324, pp. 85- 89 ,(2009) , 10.1126/SCIENCE.1165620
Michael Tangermann, Klaus-Robert Müller, Ad Aertsen, Niels Birbaumer, Christoph Braun, Clemens Brunner, Robert Leeb, Carsten Mehring, Kai J. Miller, Gernot R. Müller-Putz, Guido Nolte, Gert Pfurtscheller, Hubert Preissl, Gerwin Schalk, Alois Schlögl, Carmen Vidaurre, Stephan Waldert, Benjamin Blankertz, Review of the BCI Competition IV Frontiers in Neuroscience. ,vol. 6, pp. 55- 55 ,(2012) , 10.3389/FNINS.2012.00055
Luis Fernando Nicolas-Alonso, Jaime Gomez-Gil, Brain Computer Interfaces, a Review Sensors. ,vol. 12, pp. 1211- 1279 ,(2012) , 10.3390/S120201211
Perrin Margaux, Maby Emmanuel, Daligault Sébastien, Bertrand Olivier, Mattout Jérémie, Objective and subjective evaluation of online error correction during P300-based spelling Advances in Human-computer Interaction. ,vol. 2012, pp. 4- ,(2012) , 10.1155/2012/578295