I Can Think Like You! Towards Reaction Spoofing Attack on Brainwave-Based Authentication

Research output: Chapter in Book/Report/Conference proceedingBook chapterResearchpeer-review

Abstract

In the coming period of Internet of Things (IoT), user authentication is one important and essential security mechanism to protect assets from unauthorized access. Textual passwords are the most widely adopted authentication method, but have well-known limitations in the aspects of both security and usability. As an alternative, biometric authentication has attracted much attention, which can verify users based on their biometric features. With the fast development of EEG (electro-encephalography) sensors in current headsets and personal devices, user authentication based on brainwaves becomes feasible. Due to its potential adoption, there is an increasing need to secure such emerging authentication method. In this work, we focus on a brainwave-based computer-screen unlock mechanism, which can validate users based on their brainwave signals when seeing different images. Then, we analyze the security of such brainwave-based scheme and identify a kind of reaction spoofing attack where an attacker can try to imitate the mental reaction (either familiar or unfamiliar) of a legitimate user. In the user study, we show the feasibility and viability of such attack.
Original languageEnglish
Title of host publicationSecurity, Privacy, and Anonymity in Computation, Communication, and Storage
Volume12382
PublisherSpringer
Publication date2021
Pages251-265
ISBN (Print)978-3-030-68850-9
DOIs
Publication statusPublished - 2021
Event13th International Conference onSecurity, Privacy, and Anonymity in Computation, Communication, and Storage - Nanjing, China
Duration: 18 Dec 202020 Dec 2020

Conference

Conference13th International Conference onSecurity, Privacy, and Anonymity in Computation, Communication, and Storage
Country/TerritoryChina
CityNanjing
Period18/12/202020/12/2020
SeriesLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume12382
ISSN0302-9743

Keywords

  • EEG
  • Biometric authentication
  • Brainwave-based unlock
  • Biometric security
  • Reaction spoofing attack

Fingerprint

Dive into the research topics of 'I Can Think Like You! Towards Reaction Spoofing Attack on Brainwave-Based Authentication'. Together they form a unique fingerprint.

Cite this