False Data Injection Cyberattacks to Human Brain Implants’ Power Source

Brain-Computer Interfaces (BCIs) are bidirectional communication implantable systems between the brain and in/external computing devices such as laptops and smartphones. BCIs are Cyber-Physical Systems (CPSs) capable of computation, communication, and decision-making process. This advanced technology is used for the treatment of diseases such as Parkinson, Alzheimer, and Depression. BCIs also have futuristic applications such as brains’ interconnection network and connection of the brain to the Internet. Despite the outstanding broad applications of BCIs, researchers have not considered the vulnerabilities of these systems against cyberattacks. In this paper, we present a threat model where the attacker manipulates the BCIs’ power source by injecting false data, which may lead to battery depletion or load shedding. Specifically, three different False Data Injection (FDI) cyberattacks are designed and developed: depleting brain implants’ battery, load shedding, and combination of these attacks simultaneously. Moreover, based on the BCI structure vulnerabilities and investigated FDI cyberattacks, a cybersecurity layer is proposed to reduce the cyberattacks’ impacts. We demonstrate that FDI cyberattacks can cause a BCI battery malfunction and create significant consequences for the human that the BCI is implanted.