TY - GEN
T1 - Robust Detection of Adversarial Attacks for EEG-based Motor Imagery Classification using Hierarchical Deep Learning
AU - Aissa, Nour El Houda Sayah Ben
AU - Lakas, Abderrahmane
AU - Korichi, Ahmed
AU - Kerrache, Chaker Abdelaziz
AU - Belkacem, Abdelkader Nasreddine
N1 - Publisher Copyright:
© 2023 IEEE.
PY - 2023
Y1 - 2023
N2 - Electroencephalography (EEG) signal finds extensive use in various medical diagnoses and non-invasive brain computer interface (BCI) applications. These applications include assisting individuals with disabilities, operating devices, and facilitating communication with their environments. Recent EEG studies have achieved successful decoding of neural activity using only time series data, surpassing the classification accuracy achieved by human experts. However, the decoding models are susceptible to adversarial examples that remain imperceptible to human evaluation. Thus, there is a current lack of a versatile architecture capable of simultaneously detecting adversarial examples and classifying EEG data. In this paper, we explore a hierarchical neural network-based classifier and introduce an adversarial training approach to enable the first classifier to learn from both clean and adversarial EEG data, enhancing its resilience to adversarial attacks. Subsequently, clean data have fed to EEGNET model to classify each EEG data point into its respective class. In the evaluation phase, we focused on the robustness of this approach against Fast Gradient Sign Method (FGSM) adversarial attacks using the BCI Competition IV-2a dataset, We assessed this approach and achieved an accuracy of 99.92% and a Kappa score of 0.9985.
AB - Electroencephalography (EEG) signal finds extensive use in various medical diagnoses and non-invasive brain computer interface (BCI) applications. These applications include assisting individuals with disabilities, operating devices, and facilitating communication with their environments. Recent EEG studies have achieved successful decoding of neural activity using only time series data, surpassing the classification accuracy achieved by human experts. However, the decoding models are susceptible to adversarial examples that remain imperceptible to human evaluation. Thus, there is a current lack of a versatile architecture capable of simultaneously detecting adversarial examples and classifying EEG data. In this paper, we explore a hierarchical neural network-based classifier and introduce an adversarial training approach to enable the first classifier to learn from both clean and adversarial EEG data, enhancing its resilience to adversarial attacks. Subsequently, clean data have fed to EEGNET model to classify each EEG data point into its respective class. In the evaluation phase, we focused on the robustness of this approach against Fast Gradient Sign Method (FGSM) adversarial attacks using the BCI Competition IV-2a dataset, We assessed this approach and achieved an accuracy of 99.92% and a Kappa score of 0.9985.
KW - BCI security
KW - Deep Neural Networks
KW - EEG Adversarial
KW - EEGNET classifier
UR - http://www.scopus.com/inward/record.url?scp=85182950965&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85182950965&partnerID=8YFLogxK
U2 - 10.1109/IIT59782.2023.10366492
DO - 10.1109/IIT59782.2023.10366492
M3 - Conference contribution
AN - SCOPUS:85182950965
T3 - 2023 15th International Conference on Innovations in Information Technology, IIT 2023
SP - 156
EP - 161
BT - 2023 15th International Conference on Innovations in Information Technology, IIT 2023
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 15th International Conference on Innovations in Information Technology, IIT 2023
Y2 - 14 November 2023 through 15 November 2023
ER -