App Stores for the Brain: Privacy & Security in Brain-Computer Interfaces
Abstract — An increasing number of Brain-Computer Interfaces (BCIs) are being developed in medical and nonmedical fields, including marketing, gaming and entertainment industries. BCI enabled technology carries a great potential to improve and enhance the quality of human lives. It provides people suffering from severe neuromuscular disorders with a way to interact with the external environment. It also enables a more personalized user experience in gaming and entertainment.
These BCI applications are, however, not without risk. Established engineering practices set guarantees on performance, reliability and physical safety of BCIs. But no guarantees or standards are currently in place regarding user privacy and security. In this paper, we identify privacy and security issues arising from possible misuse or inappropriate use of BCIs. In particular, we explore how current and emerging non-invasive BCI platforms can be used to extract private information, and we suggest an interdisciplinary approach to mitigating this problem. We then propose a tool to prevent this side-channel extraction of users’ private information. This is a first step towards making BCI-enabled technologies secure and privacy preserving.
Excerpts
IV. PRIVACY AND SECURITY ISSUES IN NEURAL ENGINEERING
B. Neurosecurity
In 2009, Denning et al. [21] recognized that “the use of standard engineering practices, medical trials, and neuroethical evaluations during the design process can create systems that are safe and that follow ethical guidelines; unfortunately, none of these disciplines currently ensure that neural devices are robust against adversarial entities trying to exploit these devices to alter, block, or eavesdrop on neural signals”. Potential security threats that can be mounted against implanted neural devices were identified, and the term “neurosecurity” was introduced as “the protection of the confidentiality, integrity, and availability of neural devices from malicious parties with the goal of preserving the safety of a person’s neural mechanisms, neural computation, and free will” [21].
Keep reading
