{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T14:32:43Z","timestamp":1792679563015,"version":"4.5.0"},"reference-count":33,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T00:00:00Z","timestamp":1769731200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2026,2,2]],"date-time":"2026-02-02T00:00:00Z","timestamp":1769990400000},"content-version":"vor","delay-in-days":3,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"DOI":"10.13039\/100019904","name":"Vellore Institute of Technology, Chennai","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100019904","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci Rep"],"DOI":"10.1038\/s41598-025-34024-0","type":"journal-article","created":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T14:45:16Z","timestamp":1769784316000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Adversarial robust EEG-based brain\u2013computer interfaces using a hierarchical convolutional neural network"],"prefix":"10.1038","volume":"16","author":[{"given":"Jebin","family":"Samuel","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tamilarasi Kathirvel","family":"Murugan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Logeswari","family":"Govindaraj","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Madhan","family":"Balaji","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vikkram","family":"SenthilKumar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sreenevedh","family":"Sundararajan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,1,30]]},"reference":[{"issue":"11","key":"34024_CR1","doi-asserted-by":"publisher","first-page":"1842","DOI":"10.1016\/S1388-2457(99)00141-8","volume":"110","author":"G Pfurtscheller","year":"1999","unstructured":"Pfurtscheller, G. & Lopes da Silva, F. H. Event-related EEG\/MEG synchronization and desynchronization: Basic principles. Clin. Neurophysiol. 110(11), 1842\u20131857. https:\/\/doi.org\/10.1016\/S1388-2457(99)00141-8 (1999).","journal-title":"Clin. Neurophysiol."},{"issue":"7","key":"34024_CR2","doi-asserted-by":"publisher","first-page":"1123","DOI":"10.1109\/5.939829","volume":"89","author":"G Pfurtscheller","year":"2001","unstructured":"Pfurtscheller, G. & Neuper, C. Motor imagery and direct brain-computer communication. Proc. IEEE 89(7), 1123\u20131134. https:\/\/doi.org\/10.1109\/5.939829 (2001).","journal-title":"Proc. IEEE"},{"issue":"3","key":"34024_CR3","doi-asserted-by":"publisher","DOI":"10.1088\/1741-2552\/ab0ab5","volume":"16","author":"A Craik","year":"2019","unstructured":"Craik, A., He, Y. & Contreras-Vidal, J. L. Deep learning for electroencephalogram (EEG) classification tasks: A review. J. Neural Eng. 16(3), 031001. https:\/\/doi.org\/10.1088\/1741-2552\/ab0ab5 (2019).","journal-title":"J. Neural Eng."},{"issue":"1","key":"34024_CR4","doi-asserted-by":"publisher","first-page":"9","DOI":"10.1016\/j.jneumeth.2003.10.009","volume":"134","author":"A Delorme","year":"2004","unstructured":"Delorme, A. & Makeig, S. EEGLAB: An open-source toolbox for analysis of single-trial EEG dynamics. J. Neurosci. Methods 134(1), 9\u201321. https:\/\/doi.org\/10.1016\/j.jneumeth.2003.10.009 (2004).","journal-title":"J. Neurosci. Methods"},{"issue":"2","key":"34024_CR5","first-page":"371","volume":"10","author":"HH Jasper","year":"1958","unstructured":"Jasper, H. H. The ten twenty electrode system of the international federation. Electroencephalogr. Clin. Neurophysiol. 10(2), 371\u2013375 (1958).","journal-title":"Electroencephalogr. Clin. Neurophysiol."},{"key":"34024_CR6","unstructured":"Goodfellow, I. J., Shlens, J., & Szegedy, C. (2015). Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572, https:\/\/arxiv.org\/abs\/1412.6572."},{"issue":"5","key":"34024_CR7","doi-asserted-by":"publisher","DOI":"10.1088\/1741-2552\/aace8c","volume":"15","author":"VJ Lawhern","year":"2018","unstructured":"Lawhern, V. J. et al. EEGNet: A compact convolutional neural network for EEG-based brain-computer interfaces. J. Neural Eng. 15(5), 056013. https:\/\/doi.org\/10.1088\/1741-2552\/aace8c (2018).","journal-title":"J. Neural Eng."},{"key":"34024_CR8","doi-asserted-by":"publisher","first-page":"3275","DOI":"10.1109\/TNSRE.2023.3303316","volume":"31","author":"P Kang","year":"2023","unstructured":"Kang, P., Jiang, S. & Shull, P. B. Synthetic EMG based on adversarial style transfer can effectively attack biometric-based personal identification models. IEEE Trans. Neural Syst. Rehabil. Eng. 31, 3275\u20133284. https:\/\/doi.org\/10.1109\/TNSRE.2023.3303316 (2023).","journal-title":"IEEE Trans. Neural Syst. Rehabil. Eng."},{"key":"34024_CR9","doi-asserted-by":"publisher","first-page":"2224","DOI":"10.1109\/TNSRE.2023.3273214","volume":"31","author":"L Meng","year":"2023","unstructured":"Meng, L. et al. EEG-based brain-computer interfaces are vulnerable to backdoor attacks. IEEE Trans. Neural Syst. Rehabil. Eng. 31, 2224\u20132234. https:\/\/doi.org\/10.1109\/TNSRE.2023.3273214 (2023).","journal-title":"IEEE Trans. Neural Syst. Rehabil. Eng."},{"key":"34024_CR10","doi-asserted-by":"publisher","first-page":"1703","DOI":"10.1109\/TNSRE.2024.3391936","volume":"32","author":"X Chen","year":"2024","unstructured":"Chen, X., Wang, Z. & Wu, D. Alignment-based adversarial training (ABAT) for improving the robustness and accuracy of EEG-based BCIs. IEEE Trans. Neural Syst. Rehabil. Eng. 32, 1703\u20131714. https:\/\/doi.org\/10.1109\/TNSRE.2024.3391936 (2024).","journal-title":"IEEE Trans. Neural Syst. Rehabil. Eng."},{"key":"34024_CR11","doi-asserted-by":"publisher","first-page":"598","DOI":"10.1109\/TIP.2021.3127849","volume":"31","author":"J Wang","year":"2022","unstructured":"Wang, J., Liu, A., Bai, X. & Liu, X. Universal adversarial patch attack for automatic checkout using perceptual and attentional bias. IEEE Trans. Image Process. 31, 598\u2013611. https:\/\/doi.org\/10.1109\/TIP.2021.3127849 (2022).","journal-title":"IEEE Trans. Image Process."},{"issue":"7","key":"34024_CR12","doi-asserted-by":"publisher","first-page":"9755","DOI":"10.1109\/TITS.2021.3108520","volume":"23","author":"K Wang","year":"2022","unstructured":"Wang, K. et al. Interpreting adversarial examples and robustness for deep learning-based auto-driving systems. IEEE Trans. Intell. Transp. Syst. 23(7), 9755\u20139764. https:\/\/doi.org\/10.1109\/TITS.2021.3108520 (2022).","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"34024_CR13","doi-asserted-by":"publisher","first-page":"103074","DOI":"10.1109\/ACCESS.2022.3209243","volume":"10","author":"R Wang","year":"2022","unstructured":"Wang, R. et al. ASK: Adversarial soft k-nearest neighbor attack and defense. IEEE Access 10, 103074\u2013103088. https:\/\/doi.org\/10.1109\/ACCESS.2022.3209243 (2022).","journal-title":"IEEE Access"},{"issue":"2","key":"34024_CR14","doi-asserted-by":"publisher","first-page":"808","DOI":"10.1109\/TR.2023.3303923","volume":"73","author":"Q-X Huang","year":"2024","unstructured":"Huang, Q.-X., Chiang, L.-K., Chiu, M.-Y. & Sun, H.-M. Focus-shifting attack: An adversarial attack that retains saliency map information and manipulates model explanations. IEEE Trans. Reliab. 73(2), 808\u2013819. https:\/\/doi.org\/10.1109\/TR.2023.3303923 (2024).","journal-title":"IEEE Trans. Reliab."},{"key":"34024_CR15","doi-asserted-by":"publisher","unstructured":"Mascolo, C., Towards adversarial robustness with early exit ensembles.In: 2022 44th Annual International Conference of the IEEE Engineering in Medicine & Biology Society (EMBC), Glasgow, Scotland, United Kingdom, 2022, pp. 313\u2013316, https:\/\/doi.org\/10.1109\/EMBC48229.2022.9871347.","DOI":"10.1109\/EMBC48229.2022.9871347"},{"issue":"8","key":"34024_CR16","doi-asserted-by":"publisher","first-page":"5323","DOI":"10.1109\/TCYB.2022.3209175","volume":"53","author":"Z Wang","year":"2023","unstructured":"Wang, Z. et al. A Feature space-restricted attention attack on medical deep learning systems. IEEE Trans Cybern 53(8), 5323\u20135335. https:\/\/doi.org\/10.1109\/TCYB.2022.3209175 (2023).","journal-title":"IEEE Trans Cybern"},{"key":"34024_CR17","doi-asserted-by":"publisher","first-page":"22061","DOI":"10.1109\/ACCESS.2022.3153036","volume":"10","author":"R Wang","year":"2022","unstructured":"Wang, R. et al. RAILS: A robust adversarial immune-inspired learning system. IEEE Access 10, 22061\u201322078. https:\/\/doi.org\/10.1109\/ACCESS.2022.3153036 (2022).","journal-title":"IEEE Access"},{"key":"34024_CR18","doi-asserted-by":"publisher","first-page":"5769","DOI":"10.1109\/TIP.2021.3082317","volume":"30","author":"A Liu","year":"2021","unstructured":"Liu, A. et al. Training robust deep neural networks via adversarial noise propagation. IEEE Trans. Image Process. 30, 5769\u20135781. https:\/\/doi.org\/10.1109\/TIP.2021.3082317 (2021).","journal-title":"IEEE Trans. Image Process."},{"issue":"5","key":"34024_CR19","doi-asserted-by":"publisher","first-page":"814","DOI":"10.1109\/TNSRE.2019.2908955","volume":"27","author":"X Zhang","year":"2019","unstructured":"Zhang, X. & Wu, D. On the vulnerability of CNN classifiers in EEG-based BCIs. IEEE Trans. Neural Syst. Rehabil. Eng. 27(5), 814\u2013825. https:\/\/doi.org\/10.1109\/TNSRE.2019.2908955 (2019).","journal-title":"IEEE Trans. Neural Syst. Rehabil. Eng."},{"key":"34024_CR20","doi-asserted-by":"publisher","first-page":"1291","DOI":"10.1109\/TIP.2020.3042083","volume":"30","author":"C Zhang","year":"2021","unstructured":"Zhang, C. et al. Interpreting and improving adversarial robustness of deep neural networks with neuron sensitivity. IEEE Trans. Image Process. 30, 1291\u20131304. https:\/\/doi.org\/10.1109\/TIP.2020.3042083 (2021).","journal-title":"IEEE Trans. Image Process."},{"key":"34024_CR21","doi-asserted-by":"publisher","unstructured":"Byra, M. et al., Adversarial attacks on deep learning models for fatty liver disease classification by modification of ultrasound image reconstruction method.In: 2020 IEEE International Ultrasonics Symposium (IUS), Las Vegas, NV, USA, 2020, pp. 1\u20134, https:\/\/doi.org\/10.1109\/IUS46767.2020.9251568.","DOI":"10.1109\/IUS46767.2020.9251568"},{"issue":"3","key":"34024_CR22","doi-asserted-by":"publisher","first-page":"1249","DOI":"10.1109\/JBHI.2022.3230663","volume":"27","author":"O Rohanian","year":"2023","unstructured":"Rohanian, O. et al. Privacy-aware early detection of COVID-19 through adversarial training. IEEE J. Biomed. Health Inform. 27(3), 1249\u20131258. https:\/\/doi.org\/10.1109\/JBHI.2022.3230663 (2023).","journal-title":"IEEE J. Biomed. Health Inform."},{"issue":"4","key":"34024_CR23","doi-asserted-by":"publisher","first-page":"1296","DOI":"10.1109\/TMI.2023.3335098","volume":"43","author":"Q Yao","year":"2024","unstructured":"Yao, Q. et al. Adversarial medical image with hierarchical feature hiding. IEEE Trans. Med. Imaging 43(4), 1296\u20131307. https:\/\/doi.org\/10.1109\/TMI.2023.3335098 (2024).","journal-title":"IEEE Trans. Med. Imaging"},{"issue":"8","key":"34024_CR24","doi-asserted-by":"publisher","first-page":"2130","DOI":"10.1109\/TMI.2022.3156268","volume":"41","author":"M Xu","year":"2022","unstructured":"Xu, M., Zhang, T. & Zhang, D. MedRDF: A robust and retrain-less diagnostic framework for medical pretrained models against adversarial attack. IEEE Trans. Med. Imaging 41(8), 2130\u20132143. https:\/\/doi.org\/10.1109\/TMI.2022.3156268 (2022).","journal-title":"IEEE Trans. Med. Imaging"},{"key":"34024_CR25","doi-asserted-by":"publisher","first-page":"102684","DOI":"10.1016\/j.rineng.2024.102684","volume":"23","author":"G Jaffino","year":"2024","unstructured":"Jaffino, G., Jose, J. P., Pv, E., Dhineshbabu, N. R. & Kit, C. C. Seizure detection in EEG signal using Gaussian-Stockwell transform and Hermite polynomial features. Results Eng. 23, 102684. https:\/\/doi.org\/10.1016\/j.rineng.2024.102684 (2024).","journal-title":"Results Eng."},{"issue":"4","key":"34024_CR26","doi-asserted-by":"publisher","first-page":"100142","DOI":"10.1016\/j.slast.2024.100142","volume":"29","author":"NE Aissa","year":"2024","unstructured":"Aissa, N. E., Korichi, A., Lakas, A., Kerrache, C. A. & Calafate, C. T. Assessing robustness to adversarial attacks in attention-based networks: Case of EEG-based motor imagery classification. SLAS Technol 29(4), 100142. https:\/\/doi.org\/10.1016\/j.slast.2024.100142 (2024).","journal-title":"SLAS Technol"},{"key":"34024_CR27","doi-asserted-by":"publisher","first-page":"103378","DOI":"10.1016\/j.rineng.2024.103378","volume":"24","author":"TK Murugan","year":"2024","unstructured":"Murugan, T. K. & Kameswaran, A. Employing convolutional neural networks and explainable artificial intelligence for the detection of seizures from electroencephalogram signal. Results Eng 24, 103378. https:\/\/doi.org\/10.1016\/j.rineng.2024.103378 (2024).","journal-title":"Results Eng"},{"issue":"11","key":"34024_CR28","doi-asserted-by":"publisher","first-page":"5391","DOI":"10.1002\/hbm.23730","volume":"38","author":"RT Schirrmeister","year":"2017","unstructured":"Schirrmeister, R. T. et al. Deep learning with CNNs for EEG decoding. Hum. Brain Mapp. 38(11), 5391\u20135420. https:\/\/doi.org\/10.1002\/hbm.23730 (2017).","journal-title":"Hum. Brain Mapp."},{"key":"34024_CR29","unstructured":"Kingma, D. P., & Ba, J. (2014). Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980., https:\/\/arxiv.org\/abs\/1412.6980."},{"key":"34024_CR30","doi-asserted-by":"crossref","unstructured":"Devi, S., Singh, K., Singha, N., & Singh, M. K. (2024). A comparative analysis for EEG-based motor imagery classification across diverse datasets. In:\u00a02024 First International Conference on Electronics, Communication and Signal Processing (ICECSP)\u00a0(pp. 1\u20136). IEEE.","DOI":"10.1109\/ICECSP61809.2024.10698490"},{"issue":"1","key":"34024_CR31","doi-asserted-by":"publisher","first-page":"20237","DOI":"10.1038\/s41598-024-71118-7","volume":"14","author":"W Zhao","year":"2024","unstructured":"Zhao, W. et al. CTNet: A convolutional transformer network for EEG-based motor imagery classification. Sci. Rep. 14(1), 20237 (2024).","journal-title":"Sci. Rep."},{"issue":"1","key":"34024_CR32","doi-asserted-by":"publisher","first-page":"12935","DOI":"10.1038\/s41598-025-96611-5","volume":"15","author":"W Zhao","year":"2025","unstructured":"Zhao, W. et al. Multi-scale convolutional transformer network for motor imagery brain-computer interface. Sci. Rep. 15(1), 12935 (2025).","journal-title":"Sci. Rep."},{"key":"34024_CR33","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1007\/s11571-025-10275-5","volume":"19","author":"W Zhao","year":"2025","unstructured":"Zhao, W. et al. TCANet: A temporal convolutional attention network for motor imagery EEG decoding. Cognit Neurodyn 19, 91 (2025).","journal-title":"Cognit Neurodyn"}],"container-title":["Scientific Reports"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s41598-025-34024-0","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-025-34024-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-025-34024-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,2]],"date-time":"2026-02-02T09:47:31Z","timestamp":1770025651000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s41598-025-34024-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,30]]},"references-count":33,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["34024"],"URL":"https:\/\/doi.org\/10.1038\/s41598-025-34024-0","relation":{},"ISSN":["2045-2322"],"issn-type":[{"value":"2045-2322","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,30]]},"assertion":[{"value":"17 July 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 December 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 January 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"All authors have read and approved the manuscript.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}}],"article-number":"4353"}}