{"id":"https://openalex.org/W7165489995","doi":"https://doi.org/10.1186/s40708-026-00313-1","title":"Evaluating multi-level membership inference risk in federated EEG learning","display_name":"Evaluating multi-level membership inference risk in federated EEG learning","publication_year":2026,"publication_date":"2026-06-21","ids":{"openalex":"https://openalex.org/W7165489995","doi":"https://doi.org/10.1186/s40708-026-00313-1","pmid":"https://pubmed.ncbi.nlm.nih.gov/42323786"},"language":"en","primary_location":{"id":"doi:10.1186/s40708-026-00313-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40708-026-00313-1","pdf_url":null,"source":{"id":"https://openalex.org/S2498492389","display_name":"Brain Informatics","issn_l":"2198-4018","issn":["2198-4018","2198-4026"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Brain Informatics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1186/s40708-026-00313-1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029265091","display_name":"Taslima Khanam","orcid":"https://orcid.org/0000-0001-5842-930X"},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Taslima Khanam","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, Australia. taslima.khanam@live.vu.edu.au"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, Australia. taslima.khanam@live.vu.edu.au","institution_ids":["https://openalex.org/I71270174"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057305454","display_name":"Siuly Siuly","orcid":"https://orcid.org/0000-0003-2491-0546"},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siuly Siuly","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I71270174"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135048124","display_name":"Kate Wang","orcid":"https://orcid.org/0000-0001-5208-1090"},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Kate Wang","raw_affiliation_strings":["RMIT, Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RMIT, Melbourne, Australia","institution_ids":["https://openalex.org/I82951845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005220190","display_name":"Frank Whittaker","orcid":"https://orcid.org/0000-0002-3728-0291"},"institutions":[{"id":"https://openalex.org/I4210093399","display_name":"Novita Healthcare (Australia)","ror":"https://ror.org/00fgz4k79","country_code":"AU","type":"company","lineage":["https://openalex.org/I4210093399"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Frank Whittaker","raw_affiliation_strings":["Nexus Research Institute Pty Ltd, Richmond, SA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nexus Research Institute Pty Ltd, Richmond, SA, Australia","institution_ids":["https://openalex.org/I4210093399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139035014","display_name":"Hua Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hua Wang","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I71270174"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5029265091"],"corresponding_institution_ids":["https://openalex.org/I71270174"],"apc_list":{"value":990,"currency":"USD","value_usd":990},"apc_paid":{"value":990,"currency":"USD","value_usd":990},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.7739903,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10429","display_name":"EEG and Brain-Computer Interfaces","score":0.9678000211715698,"subfield":{"id":"https://openalex.org/subfields/2805","display_name":"Cognitive Neuroscience"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T10429","display_name":"EEG and Brain-Computer Interfaces","score":0.9678000211715698,"subfield":{"id":"https://openalex.org/subfields/2805","display_name":"Cognitive Neuroscience"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/electroencephalography","display_name":"Electroencephalography","score":0.5946999788284302},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.592199981212616},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.5827999711036682},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.5777000188827515},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5306000113487244},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.49129998683929443},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.4677000045776367},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.38499999046325684}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7613000273704529},{"id":"https://openalex.org/C522805319","wikidata":"https://www.wikidata.org/wiki/Q179965","display_name":"Electroencephalography","level":2,"score":0.5946999788284302},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.592199981212616},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.5827999711036682},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.5777000188827515},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5306000113487244},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.49129998683929443},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.4677000045776367},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45969998836517334},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4553000032901764},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39070001244544983},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.38499999046325684},{"id":"https://openalex.org/C2779137570","wikidata":"https://www.wikidata.org/wiki/Q16243196","display_name":"EXPOSE","level":2,"score":0.3847000002861023},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3700999915599823},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3587999939918518},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35260000824928284},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.3400999903678894},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.336899995803833},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.29820001125335693},{"id":"https://openalex.org/C173201364","wikidata":"https://www.wikidata.org/wiki/Q897410","display_name":"Brain\u2013computer interface","level":3,"score":0.2937999963760376},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.2831000089645386},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2766999900341034}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1186/s40708-026-00313-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40708-026-00313-1","pdf_url":null,"source":{"id":"https://openalex.org/S2498492389","display_name":"Brain Informatics","issn_l":"2198-4018","issn":["2198-4018","2198-4026"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Brain Informatics","raw_type":"journal-article"},{"id":"pmid:42323786","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/42323786","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Brain informatics","raw_type":"Journal Article"},{"id":"pmh:oai:doaj.org/article:6f74281f1fca46ed8796375e2a77e6fa","is_oa":false,"landing_page_url":"https://doaj.org/article/6f74281f1fca46ed8796375e2a77e6fa","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Brain Informatics, Vol 13, Iss 1 (2026)","raw_type":"article"},{"id":"pmh:oai:pubmedcentral.nih.gov:13328629","is_oa":true,"landing_page_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC13328629/","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Brain Inform","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1186/s40708-026-00313-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40708-026-00313-1","pdf_url":null,"source":{"id":"https://openalex.org/S2498492389","display_name":"Brain Informatics","issn_l":"2198-4018","issn":["2198-4018","2198-4026"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Brain Informatics","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","score":0.41618186235427856,"id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320976","display_name":"Victoria University","ror":"https://ror.org/04j757h98"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2568772110","https://openalex.org/W2594311007","https://openalex.org/W2776618373","https://openalex.org/W2884943453","https://openalex.org/W2911964244","https://openalex.org/W2930926105","https://openalex.org/W2963378725","https://openalex.org/W2963456518","https://openalex.org/W3021654819","https://openalex.org/W3030870789","https://openalex.org/W3088384496","https://openalex.org/W3094480217","https://openalex.org/W3123459983","https://openalex.org/W3167500796","https://openalex.org/W3180608480","https://openalex.org/W3203469066","https://openalex.org/W4205228770","https://openalex.org/W4288370357","https://openalex.org/W4385695523","https://openalex.org/W4387883641","https://openalex.org/W4390277715","https://openalex.org/W4393032351","https://openalex.org/W4398757421","https://openalex.org/W4399722559","https://openalex.org/W4401863352","https://openalex.org/W4402401431","https://openalex.org/W4403015767","https://openalex.org/W4404296434","https://openalex.org/W4404725375","https://openalex.org/W4409364270","https://openalex.org/W4410417644","https://openalex.org/W4411023395","https://openalex.org/W4411099453","https://openalex.org/W4412724857","https://openalex.org/W4413008556","https://openalex.org/W4413782309","https://openalex.org/W4415747524","https://openalex.org/W4416015236"],"related_works":[],"abstract_inverted_index":{"Electroencephalography":[0],"(EEG)":[1],"records":[2],"electrical":[3],"brain":[4],"activity":[5],"from":[6],"the":[7,185,202,208,236],"scalp":[8],"and":[9,20,38,117,128,139,175,240],"is":[10,24,48,214],"widely":[11,25],"used":[12,26],"in":[13,27,101],"brain-computer":[14],"interface":[15],"(BCI)":[16],"systems":[17],"for":[18,173,220],"communication,":[19],"assistive":[21],"technologies.":[22,243],"EEG":[23,103],"motor-imagery":[28],"(MI)":[29],"based":[30],"BCIs,":[31],"where":[32],"neural":[33,132],"recordings":[34],"contain":[35],"highly":[36],"individual":[37],"potentially":[39],"sensitive":[40],"information.":[41],"In":[42],"this":[43,107,109],"regard,":[44],"federated":[45,113],"learning":[46],"(FL)":[47],"a":[49,112,194,217],"prominent":[50],"privacy-enhancing":[51],"approach":[52],"which":[53],"enables":[54],"collaborative":[55],"model":[56],"training":[57],"without":[58],"centralising":[59],"raw":[60],"signals.":[61],"However,":[62],"recent":[63],"work":[64],"has":[65],"shown":[66],"that":[67,157,211],"FL":[68,159,212],"models":[69],"still":[70],"leak":[71],"private":[72],"information":[73],"through":[74],"membership":[75],"inference":[76],"attacks":[77],"(MIAs).":[78],"Most":[79],"existing":[80],"studies":[81],"examine":[82],"only":[83],"single":[84],"attack":[85,170],"type,":[86],"so":[87],"it":[88],"remains":[89],"unclear":[90],"how":[91],"multiple":[92],"MIAs":[93],"together":[94],"expose":[95],"different":[96],"layers":[97],"of":[98,238],"privacy":[99,119,141,179,196,218,224],"risk":[100],"FL-based":[102],"systems.":[104,222],"To":[105],"address":[106],"gap,":[108],"study":[110],"develops":[111],"MI-EEG":[114],"classification":[115,191],"framework":[116],"evaluates":[118],"leakage":[120,187],"across":[121],"four":[122],"complementary":[123],"MIAs:":[124],"record-level,":[125],"feature-level,":[126],"gradient-level,":[127],"client-identity":[129],"inference.":[130],"Two":[131],"networks":[133],"were":[134],"trained":[135],"using":[136],"per-subject":[137],"FL,":[138],"differential":[140],"(DP)":[142],"with":[143],"epsilon":[144],"(\u03b5)":[145],"\u2208":[146],"{1,":[147],"5,":[148],"10}":[149],"was":[150],"applied":[151],"to":[152,231],"client":[153],"updates.":[154],"Results":[155],"showed":[156],"standard":[158],"alone":[160,213],"provides":[161],"limited":[162],"intrinsic":[163],"protection,":[164],"while":[165],"adding":[166],"DP":[167,228],"substantially":[168],"reduces":[169],"success":[171],"particularly":[172],"gradient":[174],"identity-level":[176],"attacks.":[177],"Strong":[178],"settings":[180],"(\u03b5":[181,198],"=":[182,199],"1)":[183],"offered":[184],"greatest":[186],"reduction":[188],"but":[189],"degraded":[190],"accuracy,":[192],"whereas":[193],"moderate":[195],"budget":[197],"5)":[200],"achieved":[201],"most":[203],"favourable":[204],"privacy-utility":[205],"balance.":[206],"Overall,":[207],"findings":[209],"demonstrate":[210],"insufficient":[215],"as":[216,227],"safeguard":[219],"EEG-BCI":[221],"Explicit":[223],"mechanisms":[225],"such":[226],"are":[229],"required":[230],"mitigate":[232],"multi-level":[233],"leakage,":[234],"supporting":[235],"design":[237],"trustworthy":[239],"secure":[241],"neural-learning":[242]},"counts_by_year":[],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2026-06-22T00:00:00"}