A method, computer program product, and computer system for detecting cheating in an assessment. Brainwaves of a user are identified. An attention level of the user is determined with the identified brainwaves. The attention level of the user is analyzed. An action of the user is classified as a cheating event using the analyzed attention level of the user.