Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper investigates the vulnerability of directly trained Spiking Neural Networks (SNNs) to adversarial attacks, identifying threshold-neighboring spiking neurons as a key weakness. To improve robustness, they propose Threshold Guarding Optimization (TGO), which combines constraints in the loss function to increase gradient sparsity and noisy spiking neurons to introduce probabilistic firing. Experiments demonstrate that TGO significantly enhances the robustness of SNNs against adversarial attacks in standard scenarios.
Securing Spiking Neural Networks against adversarial attacks can be achieved by moving neuron membrane potentials away from thresholds and introducing noise.
Spiking Neural Networks (SNNs) represent a promising paradigm for energy-efficient neuromorphic computing due to their bio-plausible and spike-driven characteristics. However, the robustness of SNNs in complex adversarial environments remains significantly constrained. In this study, we theoretically demonstrate that those threshold-neighboring spiking neurons are the key factors limiting the robustness of directly trained SNNs. We find that these neurons set the upper limits for the maximum potential strength of adversarial attacks and are prone to state-flipping under minor disturbances. To address this challenge, we propose a Threshold Guarding Optimization (TGO) method, which comprises two key aspects. First, we incorporate additional constraints into the loss function to move neurons' membrane potentials away from their thresholds. It increases SNNs' gradient sparsity, thereby reducing the theoretical upper bound of adversarial attacks. Second, we introduce noisy spiking neurons to transition the neuronal firing mechanism from deterministic to probabilistic, decreasing their state-flipping probability due to minor disturbances. Extensive experiments conducted in standard adversarial scenarios prove that our method significantly enhances the robustness of directly trained SNNs. These findings pave the way for advancing more reliable and secure neuromorphic computing in real-world applications.