Search papers, labs, and topics across Lattice.
This study evaluates the effectiveness of Spiking Neural Networks (SNNs) for network intrusion detection by conducting a controlled ablation study across 27 configurations, including various neuron models and spike encoding schemes. The findings reveal that the choice of spike encoding scheme significantly influences detection quality, with latency encoding outperforming rate and delta encodings. The optimal configuration, utilizing the LeakyParallel neuron with latency encoding, achieved an impressive average accuracy of 92.11% and a macro-F1 score of 0.80, suggesting SNNs can serve as efficient alternatives to traditional deep learning models in resource-constrained environments.
Latency encoding in Spiking Neural Networks can dramatically enhance intrusion detection accuracy, outperforming traditional deep learning methods in resource-limited settings.
Network intrusion detection is a core component of modern cybersecurity infrastructure, yet the deep learning models that dominate the field are computationally demanding, motivating interest in lightweight alternatives suited to edge and neuromorphic deployment. Spiking Neural Networks (SNNs) are therefore a natural candidate, but their design space, spanning the choice of neuron model and spike encoding scheme, remains poorly characterized for intrusion detection. We bridge this gap by using a controlled ablation study using 9 neurons coupled with 3 spike encoding schemes, making 27 variants, all implemented on snntorch evaluated over raw inputs with limited preprocessing on four benchmark datasets (NSL KDD, KDDCup99, CIC-IDS2017, and CTU-13) with 5 seeds. We find that spike encoding scheme is a better determinant for detection quality than the neuron model, where rate and delta spike encodings perform worse than latency encoding over the sweep. The LeakyParallel neuron with latency encoding performed the best overall, averaging at 92.11% accuracy and 0.80 macro- F1 at a rate of 2.01% false positives averaged over all 4 datasets, with accuracy close to perfect for CIC-IDS2017 and CTU-13, and also performed the fastest on inference. These results highlight the potential of SNNs as a viable alternative to traditional methods of intrusion detection when considering low-latency or resource-constrained deployments.
