Data alignment based adversarial defense benchmark for EEG-based BCIs

Machine learning has been extensively applied to signal decoding in electroencephalogram (EEG)-based brain–computer interfaces (BCIs). While most studies have focused on enhancing the accuracy of EEG-based BCIs, more attention should be given to their security. Recent findings reveal that EEG-based BCIs are vulnerable to adversarial attacks. To address this, we present the first adversarial defense benchmark based on data alignment, aiming to enhance both the accuracy and robustness of EEG-based BCIs. This study evaluates nine adversarial defense approaches (including five defense strategies) across five EEG datasets (covering three paradigms), three neural networks, and four experimental scenarios. Our results show for the first time that integrating data augmentation, data alignment, and robust training can further improve both the accuracy and robustness of BCIs compared to using only one or two of them. Furthermore, we provide insights into the characteristics of various adversarial defense approaches based on EEG data alignment, offering valuable guidance for developing more accurate and secure EEG-based BCIs.