QIF-T0032

high

Identity spoofing (neural biometric)

Tier 4 — Demonstrated (Case Study / Observational)

Legacy status: EMERGING

Replicate user's neural signature to bypass BCI authentication. Classical biometrics (ERP templates, brainprint) are partially spoofable. If quantum neural signatures exist, no-cloning makes them physically unclonable.

Technique Details

Tactic: QIF-C.EX
Status: EMERGING
Bands: N3, N7, N6

✚ Therapeutic Application

Replication or synthesis of individual neural biometric signatures to impersonate BCI users

Clinical Analog

Neural biometric authentication for medical device access

Treats

secure BCI access control
patient identity verification

Neural Impact

3 of 7 neural bands affected

N3 N7 N6

Drag to rotate. Click a region to learn more.

Click or hover over a glowing region to see the attack techniques targeting it and their severity.

DSM-5-TR Diagnostic Mappings

Diagnostic category references for threat modeling, not diagnostic claims.

F82 Developmental Coordination Disorder F84 Pervasive developmental disorders F20 Schizophrenia Spectrum F32 Major Depressive Disorder F90 ADHD F42 OCD F41.1 Generalized Anxiety Disorder F43.10 PTSD F44 Dissociative Disorders F30 Manic episode F01 Vascular dementia F43 PTSD / Trauma F80 Communication Disorders F60 Personality Disorders F63 Impulse-Control Disorders F98.4 Stereotyped movement disorders F50 Eating Disorders F10 Alcohol-related disorders (F10) F45 Somatoform disorders

Pathway: N7 (PFC/M1) → executive function; N6 (hippocampus/amygdala) → emotion regulation

Following Poldrack (2006), brain region disruption does not uniquely predict psychiatric outcomes.

Scoring

NISS v1.1 NISS:1.1/BI:N/CR:L/CD:L/CV:I/RV:F/NP:N

CVSS v4.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

2.7Low

Governance

Neurorights at Risk

This technique threatens 3 of the 4 proposed neurorights (Ienca & Andorno, 2017).

MP Mental Privacy MI Mental Integrity PC Psychological Continuity

Consent Complexity

1.08 / 4.0

FDORA §3305 Compliance

Non-Cyber Device (missing: network)

Regulatory Coverage

0.4 / 1.0

524B Requirements

TM VA SBOM SA PM

Regulatory Gaps

! CVSS partially captures risk; neural dimensions missing

Population Vulnerability

CRB vulnerability adjustment (γ=0.30) accounts for age, diagnosis severity, consent capacity, and device dependency.

Population	NISS Base	Adjusted	Severity	Delta
Adult (Default)	2.7	2.7	Low	-
Child (10yr) + ADHD	2.7	3.2	Low	+0.48
Adult with ALS	2.7	3.1	Low	+0.44

Validation Status

Theoretical / Not yet validated. This technique has not been independently tested. See the validation dashboard for what has been tested.

Qinnovate Neural Security Atlas Edit this on GitHub