论文标题
微小的噪音，大错误：对抗性扰动会导致脑部计算机界面拼写错误
Tiny noise, big mistakes: Adversarial perturbations induce errors in Brain-Computer Interface spellers
论文作者
论文摘要
基于脑电图（EEG）的大脑计算机接口（BCI）拼写器允许用户通过思考将文本输入计算机。对于严重残疾的个体，例如肌萎缩性侧索硬化症患者，他们没有其他有效的与他人或计算机进行沟通的方法特别有用。迄今为止，大多数研究都集中在使基于EEG的BCI拼写速度更快，更可靠。但是，很少有人认为他们的安全性。这项研究首次表明，P300和稳态的视觉诱发潜在的BCI拼写器非常脆弱，即，它们可能会受到对抗性扰动的严重攻击，当对抗性的扰动中，当添加到EEG信号时，它们太小而无法引起注意，但可以误导拼写者无法拼写任何袭击者想要的东西。后果可能仅仅是用户挫败感到临床应用中严重的误诊。我们希望我们的研究能够更加关注基于脑电图的BCI拼写者的安全性，更广泛地是基于脑电图的BCI，这几乎没有受到关注。
An electroencephalogram (EEG) based brain-computer interface (BCI) speller allows a user to input text to a computer by thought. It is particularly useful to severely disabled individuals, e.g., amyotrophic lateral sclerosis patients, who have no other effective means of communication with another person or a computer. Most studies so far focused on making EEG-based BCI spellers faster and more reliable; however, few have considered their security. This study, for the first time, shows that P300 and steady-state visual evoked potential BCI spellers are very vulnerable, i.e., they can be severely attacked by adversarial perturbations, which are too tiny to be noticed when added to EEG signals, but can mislead the spellers to spell anything the attacker wants. The consequence could range from merely user frustration to severe misdiagnosis in clinical applications. We hope our research can attract more attention to the security of EEG-based BCI spellers, and more broadly, EEG-based BCIs, which has received little attention before.
