An official website of the United States government
Integrated sensing and communication (ISAC) is considered an emerging technology for 6th-generation (6G) wireless and mobile networks. It is expected to enable a wide variety of vertical applications, ranging from unmanned aerial vehicles (UAVs) detection for critical infrastructure protection to physiological sensing for mobile healthcare. Despite its significant socioeconomic benefits, ISAC technology also raises unique challenges in system security and user privacy. Being aware of the security and privacy challenges, understanding the trade-off between security and communication performance, and exploring potential countermeasures in practical systems are critical to a wide adoption of this technology in various application scenarios. This talk will discuss various security and privacy threats in emerging ISAC systems with a focus on communication-centric ISAC systems, that is, using the cellular or WiFi infrastructure for sensing. We will then examine potential mechanisms to secure ISAC systems and protect user privacy at the physical and data layers under different sensing modes. At the wireless physical (PHY) layer, an ISAC system is subject to both passive and active attacks, such as unauthorized passive sensing, unauthorized active sensing, signal spoofing, and jamming. Potential countermeasures include wireless channel/radio frequency (RF) environment obfuscation, waveform randomization, anti-jamming communication, and spectrum/RF monitoring. At the data layer, user privacy could be compromised during data collection, sharing, storage, and usage. For sensing systems powered by artificial intelligence (AI), user privacy could also be compromised during the model training and inference stages. An attacker could falsify the sensing data to achieve a malicious goal. Potential countermeasures include the application of privacy enhancing technologies (PETs), such as data anonymization, differential privacy, homomorphic encryption, trusted execution, and data synthesis.
more »
« less
This content will become publicly available on February 1, 2027
MetaHeart: Metasurface enabled biometrics camouflage
Privacy-invading biometrics monitoring is becoming a prominent security threat as modern sensing systems move to higher operating frequencies (mmWave, sub-THz), increasing sensing resolution and accuracy. As such, developing systems that can protect or obfuscate biometrics from adversarial intrusion becomes pivotal to preserving user privacy. In this work, we develop and implement MetaHeart, a real-time biometrics misinformation system based on reflective, programmable metasurfaces and dynamic phase-front manipulation of radar inferences. MetaHeart’s key goal is to prevent the leakage of a legitimate user’s heartbeat biometrics by spoofing fake heartbeat signals at a malicious, radar-equipped, heart rate sensing intruder. We experimentally demonstrate MetaHeart’s ability to fake Alice’s presence when she is not there and to fool Trudy’s inferences even when Alice is present, achieving an overall accuracy above 98%. Finally, we conduct a robustness analysis to determine MetaHeart’s required spatial placement within the intruder’s monitoring area that would allow for effective spoofing.
more »
« less
- PAR ID:
- 10696498
- Publisher / Repository:
- Elsevier
- Date Published:
- Journal Name:
- Computer Communications
- Volume:
- 247
- Issue:
- C
- ISSN:
- 0140-3664
- Page Range / eLocation ID:
- 108405
- Format(s):
- Medium: X
- Sponsoring Org:
- National Science Foundation
More Like this
-
-
The widespread adoption of heartbeat monitoring sensors has increased the demand for secure and trustworthy multimodal cardiac monitoring systems capable of accurate heartbeat pattern recognition. While existing systems offer convenience, they often suffer from critical limitations, such as variability in the number of available modalities and missing or noisy data during multimodal fusion, which may compromise both performance and data security. To address these challenges, we propose MultiHeart, which is a robust and secure multimodal interactive cardiac monitoring system designed to provide reliable heartbeat pattern recognition through the integration of diverse and trustworthy cardiac signals. MultiHeart features a novel multi-task learning architecture that includes a reconstruction module to handle missing or noisy modalities and a classification module dedicated to heartbeat pattern recognition. At its core, the system employs a multimodal autoencoder for feature extraction with shared latent representations used by lightweight decoders in the reconstruction module and by a classifier in the classification module. This design enables resilient multimodal fusion while supporting both data reconstruction and heartbeat pattern classification tasks. We implement MultiHeart and conduct comprehensive experiments to evaluate its performance. The system achieves 99.80% accuracy in heartbeat recognition, surpassing single-modal methods by 10% and outperforming existing multimodal approaches by 4%. Even under conditions of partial data input, MultiHeart maintains 94.64% accuracy, demonstrating strong robustness, high reliability, and its effectiveness as a secure solution for next-generation health-monitoring applications.more » « less
-
Iris-based biometric authentication is a wide-spread biometric modality due to its accuracy, among other benefits. Improving the resistance of iris biometrics to spoofing attacks is an important research topic. Eye tracking and iris recognition devices have similar hardware that consists of a source of infra-red light and an image sensor. This similarity potentially enables eye tracking algorithms to run on iris-driven biometrics systems. The present work advances the state-of-the-art of detecting iris print attacks, wherein an imposter presents a printout of an authentic user’s iris to a biometrics system. The detection of iris print attacks is accomplished via analysis of the captured eye movement signal with a deep learning model. Results indicate better performance of the selected approach than the previous state-of-the-art.more » « less
-
null (Ed.)In recent years, biometrics (e.g., fingerprint or face recognition) has replaced traditional passwords and PINs as a widely used method for user authentication, particularly in personal or mobile devices. Differing from state-of-the-art biometrics, heart biometrics offer the advantages of liveness detection, which provides strong tolerance to spoofing attacks. To date, several authentication methods primarily focusing on electrocardiogram (ECG) have demonstrated remarkable success; however, the degree of exploration with other cardiac signals is still limited. To this end, we discuss the challenges in various cardiac domains and propose future prospectives for developing effective heart biometrics systems in real-world applications.more » « less
-
Over the years, there has been an increase in the use of wearable sensors for high-precision Human Activity Recognition (HAR), ranging from personal fitness to remote patient monitoring. However, the continuous collection of biometric information poses a privacy risk, potentially leading to user profiling and data misuse. Today’s state-of-the-art approaches use standard encryption techniques to protect data in transit but leave it vulnerable during computation. For accurate HAR while maintaining the privacy of users’ data during collaborative analysis, we propose a hybrid, domain-agnostic framework that integrates Homomorphic Encryption (HE) with Secure Multi-Party Computation (SMPC). The proposed approach enables healthcare providers and device manufacturers to collaboratively analyze data without ever disclosing raw biometrics by utilizing HE for data encryption and secret sharing for collaborative computation. While this framework applies to general HAR scenarios, it will be crucially useful in the high-stakes domain of eldercare, where data privacy and regulatory compliance are critical. Reliable, Privacy-Aware Human Activity Sensing (RAHAS) achieved\(89.24\pm 0.95\%\)accuracy when tested on the widely used PAMAP2 dataset for HAR. Our analysis demonstrates that our privacy-preserving design provides side-channel resilience while maintaining utility comparable to clear-text baselines.more » « less
