Researchers Find Compressed EEG Decoders Are No Harder to Fool
Researchers tested whether shrinking brain-computer interface (BCI) decoders through pruning or low-precision quantization, common steps for running them on low-power devices, changes how they hold up against adversarial attacks, in which imperceptible perturbations to EEG signals trick a model into misclassifying. Compressing a model while preserving accuracy did not make it more robust: at a perturbation strength of ε=0.005, EEGNet accuracy fell to 22% to 24% in its original, 50% pruned and two INT8 quantized versions alike. Attacks transferred markedly less well between pruned and original models, while quantization left transfer almost unchanged. The study is a preprint and has not been peer reviewed.
Why it matters
As BCIs move to portable hardware, model compression is close to unavoidable, and this work warns that unchanged accuracy is not a proxy for security: robustness, attack transfer and deployment efficiency need separate evaluation. The conclusions rest on motor imagery data from 1 public dataset with 9 subjects.