Abstract:Spiking neural network (SNN) is broadly deployed in neuromorphic devices to emulate brain function. In this context, SNN security becomes important while lacking in-depth investigation. To this end, we target the adversarial attack against SNNs and identify several challenges distinct from the artificial neural network (ANN) attack: 1) current adversarial attack is mainly based on gradient information that presents in a spatiotemporal pattern in SNNs, hard to obtain with conventional backpropagation algorithms; 2) the continuous gradient of the input is incompatible with the binary spiking input during gradient accumulation, hindering the generation of spike-based adversarial examples; and 3) the input gradient can be all-zeros (i.e., vanishing) sometimes due to the zero-dominant derivative of the firing function. Recently, backpropagation through time (BPTT)-inspired learning algorithms are widely introduced into SNNs to improve the performance, which brings the possibility to attack the models accurately given spatiotemporal gradient maps. We propose two approaches to address the above challenges of gradient-input incompatibility and gradient vanishing. Specifically, we design a gradient-to-spike (G2S) converter to convert continuous gradients to ternary ones compatible with spike inputs. Then, we design a restricted spike flipper (RSF) to construct ternary gradients that can randomly flip the spike inputs with a controllable turnover rate, when meeting all-zero gradients. Putting these methods together, we build an adversarial attack methodology for SNNs. Moreover, we analyze the influence of the training loss function and the firing threshold of the penultimate layer on the attack effectiveness. Extensive experiments are conducted to validate our solution. Besides the quantitative analysis of the influence factors, we also compare SNNs and ANNs against adversarial attacks under different attack methods. This work can help reveal what happens in SNN attacks and might stimulate more research on the security of SNN models and neuromorphic devices.

Spiking Neural P Systems With Microglia

Spiking neural P systems with neuron permeability

Spiking Neural P Systems with Delay on Synapses

Spiking Neural Membrane Systems with Adaptive Synaptic Time Delay

A Survey of Neuromorphic Computing Based on Spiking Neural Networks

Toward Efficient Processing and Learning with Spikes: New Approaches for Multispike Learning

Spiking neural P systems: main ideas and results

Modular Spiking Neural Membrane Systems for Image Classification

On the Universality of Spiking Neural P Systems With Multiple Channels and Autapses

Asynchronous Numerical Spiking Neural Membrane Systems with Local Synchronization

Spiking neural P systems with autapses

Efficient Point-Process Modeling of Spiking Neurons for Neuroprosthesis

Exploiting Noise As a Resource for Computation and Learning in Spiking Neural Networks

Gated Spiking Neural P Systems for Time Series Forecasting

Enhancing the Robustness of Spiking Neural Networks with Stochastic Gating Mechanisms

PMSN: A Parallel Multi-compartment Spiking Neuron for Multi-scale Temporal Processing

A survey on learning models of spiking neural membrane systems and spiking neural networks

Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient.

MAP-SNN: Mapping spike activities with multiplicity, adaptability, and plasticity into bio-plausible spiking neural networks

Echo spiking neural P systems

Automated customization of large-scale spiking network models to neuronal population activity