Search papers, labs, and topics across Lattice.
This study introduces SpikeTimer, an innovative framework for active copyright protection in Spiking Neural Networks (SNNs) using temporal backdoor regularization. By partitioning neuromorphic data into timeslices and embedding authorized tokens within these slices, SpikeTimer effectively distinguishes between authorized and unauthorized data, achieving approximately 10% accuracy on unauthorized inputs while maintaining a minimal 1.5% degradation on authorized data. The framework's time-dependent authorization mechanism not only safeguards SNN copyrights but also demonstrates resilience against adversarial attacks and model modifications.
SpikeTimer achieves a remarkable balance between copyright protection and performance, maintaining high accuracy on authorized data while effectively misclassifying unauthorized inputs.
Spiking Neural Networks (SNN) have emerged as a revolutionary paradigm compared to traditional Deep Neural Networks (DNN) in energy-efficient computing, showcasing exceptional capabilities in processing event-driven sensory data for real-time applications like robotics and edge AI systems. However, unlike extensive studies on DNN copyright solutions, SNN copyright protection remains largely underexplored due to their inherent temporal coding complexities and spike-driven computation. In this study, we propose a novel active copyright protection framework named SpikeTimer for SNNs via temporal backdoor learning. SpikeTimer partitions neuromorphic data into designated timeslices and exclusively embeds authorized tokens within authorized slices. Furthermore, the inherent temporal segmentation characteristic intrinsically enables SpikeTimer to support multi-user authorization mechanisms and accommodates token embedding of arbitrary morphology. Based on this, SpikeTimer precisely responds to authorized data containing a token within the correct timeslice, while producing erroneous responses to unauthorized data. Our key innovation lies in establishing a time-dependent authorization mechanism that protects the SNN copyright by temporal token validity. Additionally, SpikeTimer retains its defensive efficacy even under adversarial attempts. Evaluations on multiple neuromorphic datasets manifest that SpikeTimer achieves around 10% accuracy on unauthorized data with merely around 1.5% degradation on authorized inputs. Moreover, SpikeTimer demonstrates robust resistance against model finetuning and pruning threats.
