Alignment-Based Adversarial Training (ABAT) for Improving the Robustness and Accuracy of EEG-Based BCIs

• Published in: IEEE transactions on neural systems and rehabilitation engineering Vol. 32; pp. 1703 - 1714
• Main Authors: Chen, Xiaoqing, Wang, Ziwei, Wu, Dongrui
• Format: Journal Article
• Language: English
• Published: United States IEEE 2024; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Accuracy; adversarial attack; adversarial training; Algorithms; Alignment; Artificial neural networks; Brain modeling; brain-computer interface; Brain-Computer Interfaces; Classification; Classifiers; Computer vision; Covariance matrices; data alignment; Data models; EEG; Electroencephalogram; Electroencephalography; Electroencephalography - methods; Evoked Potentials - physiology; Human-computer interface; Humans; Image classification; Imagination - physiology; Interfaces; Machine Learning; Mental task performance; Model accuracy; Neural networks; Neural Networks, Computer; Perturbation methods; Robustness; Training
• ISSN: 1534-4320; 1558-0210; 1558-0210
• DOI: 10.1109/TNSRE.2024.3391936

Machine learning has achieved great success in electroencephalogram (EEG) based brain-computer interfaces (BCIs). Most existing BCI studies focused on improving the decoding accuracy, with only a few considering the adversarial security. Although many adversarial defense approaches have been proposed in other application domains such as computer vision, previous research showed that their direct extensions to BCIs degrade the classification accuracy on benign samples. This phenomenon greatly affects the applicability of adversarial defense approaches to EEG-based BCIs. To mitigate this problem, we propose alignment-based adversarial training (ABAT), which performs EEG data alignment before adversarial training. Data alignment aligns EEG trials from different domains to reduce their distribution discrepancies, and adversarial training further robustifies the classification boundary. The integration of data alignment and adversarial training can make the trained EEG classifiers simultaneously more accurate and more robust. Experiments on five EEG datasets from two different BCI paradigms (motor imagery classification, and event related potential recognition), three convolutional neural network classifiers (EEGNet, ShallowCNN and DeepCNN) and three different experimental settings (offline within-subject cross-block/-session classification, online cross-session classification, and pre-trained classifiers) demonstrated its effectiveness. It is very intriguing that adversarial attacks, which are usually used to damage BCI systems, can be used in ABAT to simultaneously improve the model accuracy and robustness.