text: proposed a Brain-Computer-Interface (BCI) -based attack in which an adversary is able to infer private information about a user, such as their bank or area-of-living, by analyzing the user's brain activities. However, a key limitation of the above attack is that it is intrusive, requiring user cooperation, and is thus easily detectable and can be reported to other users. In this paper, we identify and analyze a more serious threat for users of BCI devices. We propose a it subliminal attack in which the victim is attacked at the levels below his cognitive perception. Our attack involves exposing the victim to visual stimuli for a duration of 13.3 milliseconds -- a duration usually not sufficient for conscious perception. The attacker analyzes subliminal brain activity in response to these short visual stimuli to infer private information about the user. If carried out carefully, for example by hiding the visual stimuli within screen content that the user expects to see, the attack may remain undetected. As a consequence, the attacker can scale it to many victims and expose them to the attack for a long time. We experimentally demonstrate the feasibility of our subliminal attack via a proof-of-concept study carried out with 27 subjects. We conducted experiments on users wearing Electroencephalography-based BCI devices, and used portrait pictures of people as visual stimuli which were embedded within the background of an innocuous video for a time duration not exceeding 13.3 milliseconds. Our experimental results show that it is feasible for an attacker to learn relevant private information about the user, such as whether the user knows the identity of the person for which the attacker is probing.
  @cite_7: This experiment provides brain event-related potential (ERP) evidence for differential processing of visually presented pleasant and unpleasant affectively valent words (mood adjectives) for both supraliminal (40 ms) and subliminal (unmasked, 1 ms) stimulus durations. Unpleasant words elicited a more positive amplitude than pleasant words in both durations. ERP components (P1, N1, P2, P3, and a late positive potential; LP) were measured at six electrode sites (F3, F4, P3, P4, CzPz, Oz). ERPs to subliminal stimuli demonstrated differences between pleasant and unpleasant words in the left hemisphere across all measured components. Supraliminal processing showed similar differences in the left hemisphere for early components (P1 and N1), but bilateral differences for late components (P3 and LP). Activity in the P2 time window was associated with the divergence between supraliminal and subliminal affective responses. Implications for the study of affect and consciousness are discussed.
summary: Subliminal Face Recognition. Given that facial recognition is seriously considered as a method of authentication, it becomes even more important to test the possibilities of extracting information from facial stimuli. There is existing neuroscientific work on the subliminal perception of human faces. ERPs in response to unpleasant expressions on faces have been shown to have a higher positive amplitude than pleasant expressions. This effect shows even through very fast unmasked subliminal presentations of stimuli, at 1ms @cite_7 . This shows that visual information regarding faces can be processed and produce variance in the EEG signal even at a very subliminal level. Although in our experiment several subjects had noticed the stimuli, a presentation time as little as 1ms could still probably reveal enough information in their EEG signal to extract desired information about faces.