mlsanityData to 14 Oct 2026

Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data

arXiv 2302.06279 ↗First posted 13 Feb 2023cs.CR cs.CV cs.LGcited by 18

Not on the map. Why?

Abstract (arXiv)

Deep neural networks (DNNs) have demonstrated remarkable performance across various tasks, including image and speech recognition. However, maximizing the effectiveness of DNNs requires meticulous optimization of numerous hyperparameters and network parameters through training. Moreover, high-performance DNNs entail many parameters, which consume significant energy during training. In order to overcome these challenges, researchers have turned to spiking neural networks (SNNs), which offer enhanced energy efficiency and biologically plausible data processing capabilities, rendering them highly suitable for sensory data tasks, particularly in neuromorphic data. Despite their advantages, SNNs, like DNNs, are susceptible to various threats, including adversarial examples and backdoor attacks. Yet, the field of SNNs still needs to be explored in terms of understanding and countering these attacks. This paper delves into backdoor attacks in SNNs using neuromorphic datasets and diverse triggers. Specifically, we explore backdoor triggers within neuromorphic data that can manipulate their position and color, providing a broader scope of possibilities than conventional triggers in domains like images. We present various attack strategies, achieving an attack success rate of up to 100% while maintaining a negligible impact on clean accuracy. Furthermore, we assess these attacks' stealthiness, revealing that our most potent attacks possess significant stealth capabilities. Lastly, we adapt several state-of-the-art defenses from the image domain, evaluating their efficacy on neuromorphic data and uncovering instances where they fall short, leading to compromised performance.

Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 35 of its 78 references that are in the map. First posted on arXiv 13 Feb 2023.

Builds on

35 of 78 references.

References · 35

  1. 2014Adam: A Method for Stochastic Optimizationcited by 37,240
  2. 2020Language Models are Few-Shot Learnerscited by 32,419
  3. 2013Intriguing properties of neural networkscited by 5,155
  4. 2015Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Codingcited by 2,329
  5. 2020Extracting Training Data from Large Language Modelscited by 2,189
  6. 2013Speech Recognition with Deep Recurrent Neural Networkscited by 669
  7. 2019Surrogate Gradient Learning in Spiking Neural Networkscited by 626
  8. 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 580
  9. 2018Spectral Signatures in Backdoor Attackscited by 484
  10. 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 459
  11. 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 456
  12. 2019A Survey of Autonomous Driving: Common Practices and Emerging Technologiescited by 379
23 more
  1. 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
  2. 2020Incorporating Learnable Membrane Time Constant to Enhance Learning of Spiking Neural Networkscited by 345
  3. 2021Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networkscited by 324
  4. 2015Converting Static Image Datasets to Spiking Neuromorphic Datasets Using Saccadescited by 314
  5. 2020Input-Aware Dynamic Backdoor Attackcited by 313
  6. 2018Deep Learning in Spiking Neural Networkscited by 263
  7. 2021Training Spiking Neural Networks Using Lessons From Deep Learningcited by 259
  8. 2018The Multi Vehicle Stereo Event Camera Dataset: An Event Camera Dataset for 3D Perceptioncited by 254
  9. 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
  10. 2016Training Deep Spiking Neural Networks using Backpropagationcited by 205
  11. 2018Event-based Vision meets Deep Learning on Steering Prediction for Self-driving Carscited by 200
  12. 2020Blind Backdoors in Deep Learning Modelscited by 182
  13. 2020Dynamic Backdoor Attacks Against Machine Learning Modelscited by 151
  14. 2019Bypassing Backdoor Detection Algorithms in Deep Learningcited by 74
  15. 2021Black-box Detection of Backdoor Attacks with Limited Information and Datacited by 73
  16. 2020Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attackcited by 64
  17. 2015Spiking Deep Networks with LIF Neuronscited by 63
  18. 2021Poison Ink: Robust and Invisible Backdoor Attackcited by 50
  19. 2021A Spiking Neural Network for Image Segmentationcited by 27
  20. 2021CarSNN: An Efficient Spiking Neural Network for Event-Based Autonomous Cars on the Loihi Neuromorphic Research Processorcited by 27
  21. 2020Convolutional Spiking Neural Networks for Spatio-Temporal Feature Extractioncited by 23
  22. 2020NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flipscited by 21
  23. 2018Unsupervised Learning with Self-Organizing Spiking Neural Networkscited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2023: 1; 2024: 7; 2025: 4; 2026: 6.

18 papers.

Sort:

By area:

  1. 2023SpikingJelly: An open-source machine learning infrastructure platform for spike-based intelligencecited by 169
  2. 2024BAN: Detecting Backdoors Activated by Adversarial Neuron Noisecited by 8
  3. 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networkscited by 5
  4. 2024Time-Distributed Backdoor Attacks on Federated Spiking Learningcited by 4
  5. 2024Membership Privacy Evaluation in Deep Spiking Neural Networkscited by 3
  6. 2024Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Camerascited by 3
  7. 2024Spikewhisper: Temporal Spike Backdoor Attacks on Federated Neuromorphic Learning over Low-power Devicescited by 2
  8. 2024Context is the Key: Backdoor Attacks for In-Context Learning with Vision Transformerscited by 2
  9. 2024LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithmcited by 2
  10. 2025Edge Intelligence with Spiking Neural Networkscited by 2
  11. 2025Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networkscited by 1
  12. 2026Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profitcited by 1
6 more
  1. 2026Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNscited by 1
  2. 2025Hyperdimensional Decoding of Spiking Neural Networkscited by 0
  3. 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Surveycited by 0
  4. 2026BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuroncited by 0
  5. 2026PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformerscited by 0
  6. 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attackscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026T-Backdoor: Exploiting Temporal Redundancy in Neuromorphic Data for Spike-preserving Backdoor Attacks on SNNs ↗
  2. 2024Data Poisoning-based Backdoor Attack Framework against Supervised Learning Rules of Spiking Neural Networks
  3. 2024Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study
  4. 2025On the Privacy Risks of Spiking Neural Networks: A Membership Inference Analysis
  5. 2024Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks
  6. 2026SpikeTimer: Exploring Active Copyright Protection in Spiking Neural Networks via Temporal Backdoor Regularization
  7. 2025On the Privacy-Preserving Properties of Spiking Neural Networks with Unique Surrogate Gradients and Quantization Levels
  8. 2024A Practical Trigger-Free Backdoor Attack on Neural Networks ↗