Securing Deep Spiking Neural Networks against Adversarial Attacks through Inherent Structural Parameters
Not on the map. Why?
Abstract (arXiv)
Deep Learning (DL) algorithms have gained popularity owing to their practical problem-solving capacity. However, they suffer from a serious integrity threat, i.e., their vulnerability to adversarial attacks. In the quest for DL trustworthiness, recent works claimed the inherent robustness of Spiking Neural Networks (SNNs) to these attacks, without considering the variability in their structural spiking parameters. This paper explores the security enhancement of SNNs through internal structural parameters. Specifically, we investigate the SNNs robustness to adversarial attacks with different values of the neuron's firing voltage thresholds and time window boundaries. We thoroughly study SNNs security under different adversarial attacks in the strong white-box setting, with different noise budgets and under variable spiking parameters. Our results show a significant impact of the structural parameters on the SNNs' security, and promising sweet spots can be reached to design trustworthy SNNs with 85% higher robustness than a traditional non-spiking DL system. To the best of our knowledge, this is the first work that investigates the impact of structural parameters on SNNs robustness to adversarial attacks. The proposed contributions and the experimental framework is available online to the community for reproducible research.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). First posted on arXiv 9 Dec 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 4; 2023: 5; 2024: 3; 2025: 9; 2026: 3.
27 papers.
Sort:
By area:
- 2021HIRE-SNN: Harnessing the Inherent Robustness of Energy-Efficient Deep Spiking Neural Networks by Training with Crafted Input Noisecited by 65
- 2021DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networkscited by 21
- 2021Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Frameworkcited by 17
- 2022Attacking the Spike: On the Transferability and Security of Spiking Neural Networks to Adversarial Examplescited by 13
- 2022Toward Robust Spiking Neural Network Against Adversarial Perturbationcited by 12
- 2025Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradientscited by 9
- 2023A Comprehensive Review of Spiking Neural Networks: Interpretation, Optimization, Efficiency, and Best Practicescited by 8
- 2024Advancing Training Efficiency of Deep Spiking Neural Networks through Rate-based Backpropagationcited by 8
- 2023Adversarially Robust Spiking Neural Networks Through Conversioncited by 7
- 2024Embodied Neuromorphic Artificial Intelligence for Robotics: Perspectives, Challenges, and Research Development Stackcited by 7
- 2022Special Session: Towards an Agile Design Methodology for Efficient, Reliable, and Secure ML Systemscited by 6
- 2025Efficient ANN-Guided Distillation: Aligning Rate-based Features of Spiking Neural Networks through Hybrid Block-wise Replacementcited by 6
15 more
- 2024Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Studycited by 5
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networkscited by 5
- 2023HoSNN: Adversarially-Robust Homeostatic Spiking Neural Networks with Adaptive Firing Thresholdscited by 3
- 2025MPD-SGR: Robust Spiking Neural Networks with Membrane Potential Distribution-Driven Surrogate Gradient Regularizationcited by 2
- 2022Adversarial Defense via Neural Oscillation inspired Gradient Maskingcited by 1
- 2025On the Privacy Risks of Spiking Neural Networks: A Membership Inference Analysiscited by 1
- 2025Input-Specific and Universal Adversarial Attack Generation for Spiking Neural Networks in the Spiking Domaincited by 1
- 2023Security-Aware Approximate Spiking Neural Networkscited by 0
- 2023HyperSNN: A new efficient and robust deep learning model for resource constrained control applicationscited by 0
- 2025Adversarially Robust Spiking Neural Networks with Sparse Connectivitycited by 0
- 2025Neuromorphic Computing for Embodied Intelligence in Autonomous Systems: Current Trends, Challenges, and Future Directionscited by 0
- 2025TDSNNs: Competitive Topographic Deep Spiking Neural Networks for Visual Cortex Modelingcited by 0
- 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Surveycited by 0
- 2026Robust Spiking Neural Networks Against Adversarial Attackscited by 0
- 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attackscited by 0
- 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attacks30 Jul 2026
- 2026Robust Spiking Neural Networks Against Adversarial Attacks24 Feb 2026
- 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Survey23 Jan 2026
- 2025MPD-SGR: Robust Spiking Neural Networks with Membrane Potential Distribution-Driven Surrogate Gradient Regularization15 Nov 2025
- 2025TDSNNs: Competitive Topographic Deep Spiking Neural Networks for Visual Cortex Modeling6 Aug 2025
- 2025Neuromorphic Computing for Embodied Intelligence in Autonomous Systems: Current Trends, Challenges, and Future Directions24 Jul 2025
- 2025Adversarially Robust Spiking Neural Networks with Sparse Connectivity16 May 2025
- 2025Input-Specific and Universal Adversarial Attack Generation for Spiking Neural Networks in the Spiking Domain7 May 2025
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networks20 Mar 2025
- 2025Efficient ANN-Guided Distillation: Aligning Rate-based Features of Spiking Neural Networks through Hybrid Block-wise Replacement20 Mar 2025
- 2025Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradients5 Mar 2025
- 2025On the Privacy Risks of Spiking Neural Networks: A Membership Inference Analysis18 Feb 2025
15 more
- 2024Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study10 Nov 2024
- 2024Advancing Training Efficiency of Deep Spiking Neural Networks through Rate-based Backpropagation15 Oct 2024
- 2024Embodied Neuromorphic Artificial Intelligence for Robotics: Perspectives, Challenges, and Research Development Stack4 Apr 2024
- 2023Adversarially Robust Spiking Neural Networks Through Conversion15 Nov 2023
- 2023HoSNN: Adversarially-Robust Homeostatic Spiking Neural Networks with Adaptive Firing Thresholds20 Aug 2023
- 2023HyperSNN: A new efficient and robust deep learning model for resource constrained control applications16 Aug 2023
- 2023A Comprehensive Review of Spiking Neural Networks: Interpretation, Optimization, Efficiency, and Best Practices19 Mar 2023
- 2023Security-Aware Approximate Spiking Neural Networks12 Jan 2023
- 2022Adversarial Defense via Neural Oscillation inspired Gradient Masking4 Nov 2022
- 2022Attacking the Spike: On the Transferability and Security of Spiking Neural Networks to Adversarial Examples7 Sep 2022
- 2022Special Session: Towards an Agile Design Methodology for Efficient, Reliable, and Secure ML Systems18 Apr 2022
- 2022Toward Robust Spiking Neural Network Against Adversarial Perturbation12 Apr 2022
- 2021HIRE-SNN: Harnessing the Inherent Robustness of Energy-Efficient Deep Spiking Neural Networks by Training with Crafted Input Noise6 Oct 2021
- 2021Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Framework20 Sep 2021
- 2021DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networks1 Jul 2021
- 2021HIRE-SNN: Harnessing the Inherent Robustness of Energy-Efficient Deep Spiking Neural Networks by Training with Crafted Input Noisecited by 65
- 2021DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networkscited by 21
- 2021Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Frameworkcited by 17
- 2022Attacking the Spike: On the Transferability and Security of Spiking Neural Networks to Adversarial Examplescited by 13
- 2022Toward Robust Spiking Neural Network Against Adversarial Perturbationcited by 12
- 2025Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradientscited by 9
- 2023A Comprehensive Review of Spiking Neural Networks: Interpretation, Optimization, Efficiency, and Best Practicescited by 8
- 2024Advancing Training Efficiency of Deep Spiking Neural Networks through Rate-based Backpropagationcited by 8
- 2023Adversarially Robust Spiking Neural Networks Through Conversioncited by 7
- 2024Embodied Neuromorphic Artificial Intelligence for Robotics: Perspectives, Challenges, and Research Development Stackcited by 7
- 2022Special Session: Towards an Agile Design Methodology for Efficient, Reliable, and Secure ML Systemscited by 6
- 2025Efficient ANN-Guided Distillation: Aligning Rate-based Features of Spiking Neural Networks through Hybrid Block-wise Replacementcited by 6
12 most cited of 26 All 26 (JSON)
- 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attacks30 Jul 2026
- 2026Robust Spiking Neural Networks Against Adversarial Attacks24 Feb 2026
- 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Survey23 Jan 2026
- 2025MPD-SGR: Robust Spiking Neural Networks with Membrane Potential Distribution-Driven Surrogate Gradient Regularization15 Nov 2025
- 2025TDSNNs: Competitive Topographic Deep Spiking Neural Networks for Visual Cortex Modeling6 Aug 2025
- 2025Neuromorphic Computing for Embodied Intelligence in Autonomous Systems: Current Trends, Challenges, and Future Directions24 Jul 2025
- 2025Adversarially Robust Spiking Neural Networks with Sparse Connectivity16 May 2025
- 2025Input-Specific and Universal Adversarial Attack Generation for Spiking Neural Networks in the Spiking Domain7 May 2025
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networks20 Mar 2025
- 2025Efficient ANN-Guided Distillation: Aligning Rate-based Features of Spiking Neural Networks through Hybrid Block-wise Replacement20 Mar 2025
- 2025Towards Effective and Sparse Adversarial Attack on Spiking Neural Networks via Breaking Invisible Surrogate Gradients5 Mar 2025
- 2024Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study10 Nov 2024
12 newest of 26 All 26 (JSON)