Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models
Biometric-based personal identification models are generally considered to be accurate and secure because biological signals are too complex and person-specific to be fabricated, and EMG signals, in particular, have been used as biological identification tokens due to their high dimension and non-li...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2023-01-01
|
| Series: | IEEE Transactions on Neural Systems and Rehabilitation Engineering |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10210587/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1849762788082188288 |
|---|---|
| author | Peiqi Kang Shuo Jiang Peter B. Shull |
| author_facet | Peiqi Kang Shuo Jiang Peter B. Shull |
| author_sort | Peiqi Kang |
| collection | DOAJ |
| description | Biometric-based personal identification models are generally considered to be accurate and secure because biological signals are too complex and person-specific to be fabricated, and EMG signals, in particular, have been used as biological identification tokens due to their high dimension and non-linearity. We investigate the possibility of effectively attacking EMG-based identification models with adversarial biological input via a novel EMG signal individual-style transformer based on a generative adversarial network and tiny leaked data segments. Since two same EMG segments do not exist in nature; the leaked data can’t be used to attack the model directly or it will be easily detected. Therefore, it is necessary to extract the style with the leaked personal signals and generate the attack signals with different contents. With our proposed method and tiny leaked personal EMG fragments, numerous EMG signals with different content can be generated in that person’s style. EMG hand gesture data from eighteen subjects and three well-recognized deep EMG classifiers were used to demonstrate the effectiveness of the proposed attack methods. The proposed methods achieved an average of 99.41% success rate on confusing identification models and an average of 91.51% success rate on manipulating identification models. These results demonstrate that EMG classifiers based on deep neural networks can be vulnerable to synthetic data attacks. The proof-of-concept results reveal that synthetic EMG biological signals must be considered in biological identification system design across a vast array of relevant biometric systems to ensure personal identification security for individuals and institutions. |
| format | Article |
| id | doaj-art-7d1bfd52cfb24a58aec0ee5a67709636 |
| institution | DOAJ |
| issn | 1534-4320 1558-0210 |
| language | English |
| publishDate | 2023-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Transactions on Neural Systems and Rehabilitation Engineering |
| spelling | doaj-art-7d1bfd52cfb24a58aec0ee5a677096362025-08-20T03:05:39ZengIEEEIEEE Transactions on Neural Systems and Rehabilitation Engineering1534-43201558-02102023-01-01313275328410.1109/TNSRE.2023.330331610210587Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification ModelsPeiqi Kang0https://orcid.org/0000-0003-2499-1251Shuo Jiang1https://orcid.org/0000-0003-3645-6301Peter B. Shull2https://orcid.org/0000-0001-8931-5743State Key Laboratory of Mechanical System and Vibration, School of Mechanical Engineering, Shanghai Jiao Tong University, Shanghai, ChinaCollege of Electronics and Information Engineering, Tongji University, Shanghai, ChinaState Key Laboratory of Mechanical System and Vibration, School of Mechanical Engineering, Shanghai Jiao Tong University, Shanghai, ChinaBiometric-based personal identification models are generally considered to be accurate and secure because biological signals are too complex and person-specific to be fabricated, and EMG signals, in particular, have been used as biological identification tokens due to their high dimension and non-linearity. We investigate the possibility of effectively attacking EMG-based identification models with adversarial biological input via a novel EMG signal individual-style transformer based on a generative adversarial network and tiny leaked data segments. Since two same EMG segments do not exist in nature; the leaked data can’t be used to attack the model directly or it will be easily detected. Therefore, it is necessary to extract the style with the leaked personal signals and generate the attack signals with different contents. With our proposed method and tiny leaked personal EMG fragments, numerous EMG signals with different content can be generated in that person’s style. EMG hand gesture data from eighteen subjects and three well-recognized deep EMG classifiers were used to demonstrate the effectiveness of the proposed attack methods. The proposed methods achieved an average of 99.41% success rate on confusing identification models and an average of 91.51% success rate on manipulating identification models. These results demonstrate that EMG classifiers based on deep neural networks can be vulnerable to synthetic data attacks. The proof-of-concept results reveal that synthetic EMG biological signals must be considered in biological identification system design across a vast array of relevant biometric systems to ensure personal identification security for individuals and institutions.https://ieeexplore.ieee.org/document/10210587/EMGsynthetic biological signalgenerative adversarial networkidentification |
| spellingShingle | Peiqi Kang Shuo Jiang Peter B. Shull Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models IEEE Transactions on Neural Systems and Rehabilitation Engineering EMG synthetic biological signal generative adversarial network identification |
| title | Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models |
| title_full | Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models |
| title_fullStr | Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models |
| title_full_unstemmed | Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models |
| title_short | Synthetic EMG Based on Adversarial Style Transfer Can Effectively Attack Biometric-Based Personal Identification Models |
| title_sort | synthetic emg based on adversarial style transfer can effectively attack biometric based personal identification models |
| topic | EMG synthetic biological signal generative adversarial network identification |
| url | https://ieeexplore.ieee.org/document/10210587/ |
| work_keys_str_mv | AT peiqikang syntheticemgbasedonadversarialstyletransfercaneffectivelyattackbiometricbasedpersonalidentificationmodels AT shuojiang syntheticemgbasedonadversarialstyletransfercaneffectivelyattackbiometricbasedpersonalidentificationmodels AT peterbshull syntheticemgbasedonadversarialstyletransfercaneffectivelyattackbiometricbasedpersonalidentificationmodels |