Abstract:Machine learning algorithms are increasingly used for inference and decision-making in embedded systems. Data from sensors are used to train machine learning models for various smart functions of embedded and cyber-physical systems ranging from applications in healthcare, autonomous vehicles, and national security. However, recent studies have shown that machine learning models can be fooled by adding adversarial noise to their inputs. The perturbed inputs are called adversarial examples. Furthermore, adversarial examples designed to fool one machine learning system are also often effective against another system. This property of adversarial examples is called adversarial transferability and has not been explored in wearable systems to date. In this work, we take the first stride in studying adversarial transferability in wearable sensor systems from four viewpoints: (1) transferability between machine learning models; (2) transferability across users/subjects of the embedded system; (3) transferability across sensor body locations; and (4) transferability across datasets used for model training. We present a set of carefully designed experiments to investigate these transferability scenarios. We also propose a threat model describing the interactions of an adversary with the source and target sensor systems in different transferability settings. In most cases, we found high untargeted transferability, whereas targeted transferability success scores varied from to . The transferability of adversarial examples depends on many factors such as the inclusion of data from all subjects, sensor body position, number of samples in the dataset, type of learning algorithm, and the distribution of source and target system dataset. The transferability of adversarial examples decreased sharply when the data distribution of the source and target system became more distinct. We also provide guidelines and suggestions for the community for designing robust sensor systems. Code and dataset used in our analysis is publicly available here.

Disentangled Adversarial Transfer Learning for Physiological Biosignals

Adversarial Transferability in Embedded Sensor Systems: An Activity Recognition Perspective

Adaptive Adversarial Transfer Learning for Electroencephalography Classification

Unsupervised Domain Adaptation by Causal Learning for Biometric Signal-based HCI

Video-based Remote Physiological Measurement via Cross-verified Feature Disentangling

TASKED: Transformer-based Adversarial learning for human activity recognition using wearable sensors via Self-KnowledgE Distillation

ADAPT: Multimodal Learning for Detecting Physiological Changes under Missing Modalities

Knowledge distillation based lightweight domain adversarial neural network for electroencephalogram-based emotion recognition

Exploiting Multiple EEG Data Domains with Adversarial Learning

Inter-participant transfer learning with attention based domain adversarial training for P300 detection

Stabilizing Subject Transfer in EEG Classification with Divergence Estimation

Adversarial-Robust Transfer Learning for Medical Imaging via Domain Assimilation

Decorrelative Network Architecture for Robust Electrocardiogram Classification

TS-MoCo: Time-Series Momentum Contrast for Self-Supervised Physiological Representation Learning

Adversarial Transfer Learning for Biomedical Named Entity Recognition

Self-supervised transfer learning of physiological representations from free-living wearable data

Deep-Learning Domain Adaptation to Improve Generalizability across Subjects and Contexts in Detecting Construction Workers’ Stress from Biosignals

Transfer Learning in Brain-Computer Interfaces with Adversarial Variational Autoencoders

Spatial Adaptation Layer: Interpretable Domain Adaptation For Biosignal Sensor Array Applications

A Lightweight Domain Adversarial Neural Network Based on Knowledge Distillation for EEG-based Cross-subject Emotion Recognition

Emotion recognition based on multi-modal physiological signals and transfer learning