Skip to content

QIF-T0041

high

Cognitive biometric inference

Tier 3 — Demonstrated (Lab-proven)

Legacy status: DEMONSTRATED

Infer sensitive personal attributes (health conditions, sexual orientation, political beliefs, cognitive decline) from BCI usage metadata and neural signal statistics without decoding content. Side-channel on cognition.

Technique Details

Tactic
QIF-C.EX
Status
DEMONSTRATED
Bands
N6, N7, S3

✚ Therapeutic Application

Inference of cognitive traits, emotional states, or health conditions from BCI signal patterns

Clinical Analog

EEG-based cognitive and psychiatric assessment

Treats

  • ADHD diagnosis
  • depression screening
  • dementia early detection
  • sleep disorders

Neural Impact

3 of 7 neural bands affected

N6 N7 S3

Drag to rotate. Click a region to learn more.

Click or hover over a glowing region to see the attack techniques targeting it and their severity.

DSM-5-TR Diagnostic Mappings

Diagnostic category references for threat modeling, not diagnostic claims.

F32 Major Depressive Disorder F41.1 Generalized Anxiety Disorder F43.10 PTSD F44 Dissociative Disorders F20 Schizophrenia Spectrum F90 ADHD F42 OCD F30 Manic episode F50 Eating Disorders F10 Alcohol-related disorders (F10) F60 Personality Disorders F45 Somatoform disorders F63 Impulse-Control Disorders F01 Vascular dementia F43 PTSD / Trauma F80 Communication Disorders F98.4 Stereotyped movement disorders

Pathway: N7 (PFC/M1) → executive function; N6 (hippocampus/amygdala) → emotion regulation

Following Poldrack (2006), brain region disruption does not uniquely predict psychiatric outcomes.

Scoring

NISS v1.1 NISS:1.1/BI:N/CR:L/CD:L/CV:I/RV:F/NP:N
CVSS v4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
2.7Low
BICRCDCVRVNP
 

Governance

Neurorights at Risk

This technique threatens 4 of the 4 proposed neurorights (Ienca & Andorno, 2017).

MP Mental Privacy MI Mental Integrity PC Psychological Continuity DI DI
Consent Complexity
0.96 / 4.0

FDORA §3305 Compliance

Non-Cyber Device (missing: software)
Regulatory Coverage
0.5 / 1.0
524B Requirements
TM VA SA PM
Regulatory Gaps
  • ! CVSS partially captures risk; neural dimensions missing
  • ! No FDA pathway for consumer sensor exploitation

Population Vulnerability

CRB vulnerability adjustment (γ=0.30) accounts for age, diagnosis severity, consent capacity, and device dependency.

Population NISS Base Adjusted Severity Delta
Adult (Default) 2.7 2.7 Low -
Child (10yr) + ADHD 2.7 3.2 Low +0.48
Adult with ALS 2.7 3.1 Low +0.44

Validation Status

Theoretical / Not yet validated. This technique has not been independently tested. See the validation dashboard for what has been tested.

Qinnovate Neural Security Atlas Edit this on GitHub