Abstract:As spiking neural networks (SNNs) gain traction in deploying neuromorphic computing solutions, protecting their intellectual property (IP) has become crucial. Without adequate safeguards, proprietary SNN architectures are at risk of theft, replication, or misuse, which could lead to significant financial losses for the owners. While IP protection techniques have been extensively explored for artificial neural networks (ANNs), their applicability and effectiveness for the unique characteristics of SNNs remain largely unexplored. In this work, we pioneer an investigation into adapting two prominent watermarking approaches, namely, fingerprint-based and backdoor-based mechanisms to secure proprietary SNN architectures. We conduct thorough experiments to evaluate the impact on fidelity, resilience against overwrite threats, and resistance to compression attacks when applying these watermarking techniques to SNNs, drawing comparisons with their ANN counterparts. This study lays the groundwork for developing neuromorphic-aware IP protection strategies tailored to the distinctive dynamics of SNNs.

What problem does this paper attempt to address?

The problem that this paper attempts to solve is to protect the intellectual property (IP) of spiking neural networks (SNNs). As SNNs are more and more widely used in deploying brain - like computing solutions, it is crucial to ensure that their IP is not stolen, copied or misused. These problems may cause the owners to suffer significant economic losses. Specifically, the paper focuses on the following points: 1. **Background problems**: Traditional IP protection techniques mainly target artificial neural networks (ANNs), while for the emerging field of SNNs with unique characteristics, the application and effectiveness of these techniques have not been fully explored. 2. **Research objectives**: This paper aims to explore how to apply two mainstream watermarking methods (fingerprint - based methods and backdoor - based methods) to SNNs, and evaluate their effects on model fidelity, resistance to overwriting threats and resistance to compression attacks. 3. **Experimental verification**: Through a series of experiments, the research team compared the performance of these two watermarking methods on SNNs and ANNs, laying the foundation for the development of IP protection strategies specifically for SNNs. ### Specific problem description - **IP protection requirements**: With the popularization of SNNs in research and commercial applications, protecting the intellectual property of these complex models has become particularly important. Developing advanced SNN architectures usually requires a large amount of computing resources, data sets and professional knowledge. The lack of effective IP protection measures may lead to the model being misappropriated or misused, thus bringing economic losses and legal challenges to the owners. - **Insufficiency of existing technologies**: Although there has been a large amount of research on IP protection techniques for ANNs, these methods are not necessarily applicable to SNNs because SNNs have unique spatio - temporal dynamic characteristics, which make it difficult to directly transfer the existing IP protection techniques. ### Solutions To meet the above challenges, this paper proposes the following research contents: 1. **Adaptability research**: Explore how to adjust and apply fingerprint - based and backdoor - based watermarking methods to SNNs. 2. **Performance evaluation**: Through extensive experiments, evaluate the influence of these methods on the fidelity in SNNs and their ability to resist various potential threats (such as overwriting attacks and compression attacks). 3. **Comparative analysis**: Compare the effects of these methods in SNNs and ANNs, provide insights into the effectiveness of the existing ANN - specific watermarking schemes in SNNs, and pave the way for further development of customized IP protection techniques. ### Conclusions The research shows that although the backdoor - based watermarking method performs better in SNNs, the fidelity and anti - overwriting attack ability of both methods in SNNs are lower than those in ANNs. This is mainly due to the temporal dynamic characteristics and distributed representation of SNNs. In addition, SNNs show stronger robustness when facing compression attacks such as weight pruning, but are more likely to be affected by performance degradation due to too few parameters. Future research needs to further explore watermarking methods specifically designed for SNNs to fully utilize their unique characteristics and dynamic characteristics and achieve more effective IP protection.

Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks

Ownership Verification of DNN Architectures Via Hardware Cache Side Channels.

Protecting the Intellectual Property of Deep Neural Networks with Watermarking: The Frequency Domain Approach

BrainLeaks: On the Privacy-Preserving Properties of Neuromorphic Architectures against Model Inversion Attacks

Deep Model Intellectual Property Protection Via Deep Watermarking

Deep Intellectual Property Protection: A Survey

Active intellectual property protection for deep neural networks through stealthy backdoor and users’ identities authentication

Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images

Watermarking Neural Networks with Watermarked Images

How to Prove Your Model Belongs to You: A Blind-Watermark based Framework to Protect Intellectual Property of DNN

SecureNet: Proactive intellectual property protection and model security defense for DNNs based on backdoor learning

SNNGX: Securing Spiking Neural Networks with Genetic XOR Encryption on RRAM-based Neuromorphic Accelerator

Intellectual property protection of DNN models

A survey of Deep Neural Network watermarking techniques

Cracking White-box DNN Watermarks via Invariant Neuron Transforms

Persistent and Unforgeable Watermarks for Deep Neural Networks.

FreeMark: A Non-Invasive White-Box Watermarking for Deep Neural Networks

Rethinking White-BoxWatermarks on Deep Learning Models under Neural Structural Obfuscation

Watermarking Neural Network with Compensation Mechanism

OVLA: Neural Network Ownership Verification using Latent Watermarks

Watermarking Deep Neural Networks With Greedy Residuals