Skip to content

QIF-T0022

high

Neurofeedback falsification

Tier 4 — Demonstrated (Case Study / Observational)

Legacy status: EMERGING

Manipulate neurofeedback display or stimulation parameters in closed-loop BCIs. User adapts brain state to false feedback, causing maladaptive neuroplasticity. Therapeutic BCIs (ADHD, depression) most vulnerable.

Technique Details

Tactic
QIF-M.SV
Status
EMERGING
Bands
S2, N7

Therapeutic Application

Falsification of neurofeedback display or stimulation in closed-loop therapeutic BCIs

Clinical Analog

Neurofeedback therapy

Treats

  • ADHD
  • anxiety
  • depression
  • PTSD
  • substance abuse
  • autism spectrum

Neural Impact

2 of 7 neural bands affected

S2 N7

Drag to rotate. Click a region to learn more.

Click or hover over a glowing region to see the attack techniques targeting it and their severity.

DSM-5-TR Diagnostic Mappings

Diagnostic category references for threat modeling, not diagnostic claims.

F20 Schizophrenia Spectrum F32 Major Depressive Disorder F90 ADHD F42 OCD F30 Manic episode F43 PTSD / Trauma F80 Communication Disorders F60 Personality Disorders F63 Impulse-Control Disorders F01 Vascular dementia F98.4 Stereotyped movement disorders

Pathway: N7 (PFC/M1) → executive function

Following Poldrack (2006), brain region disruption does not uniquely predict psychiatric outcomes.

Scoring

NISS v1.1 NISS:1.1/BI:H/CR:H/CD:H/CV:I/RV:P/NP:S
CVSS v4.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:H/SA:H
8.1High
PINSPINS triggers when Biological Impact is High/Critical or Reversibility is Irreversible. Indicates potential lasting harm to neural safety.
BICRCDCVRVNP
 

Governance

Neurorights at Risk

This technique threatens 5 of the 4 proposed neurorights (Ienca & Andorno, 2017).

Consent Complexity
1.20 / 4.0

FDORA §3305 Compliance

Cyber Device
Regulatory Coverage
0.6 / 1.0
524B Requirements
TM VA SBOM PM
Regulatory Gaps
  • ! CVSS cannot express neural-specific impacts
  • ! High neural impact (NISS >= 7.0) without IEC 62443 coverage

Population Vulnerability

CRB vulnerability adjustment (γ=0.30) accounts for age, diagnosis severity, consent capacity, and device dependency.

Population NISS Base Adjusted Severity Delta
Adult (Default) 8.1 8.1 High -
Child (10yr) + ADHD 8.1 9.5 Critical +1.43
Adult with ALS 8.1 9.4 Critical +1.31

Validation Status

Theoretical / Not yet validated. This technique has not been independently tested. See the validation dashboard for what has been tested.

Qinnovate Neural Security Atlas Edit this on GitHub