Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data
Not on the map. Why?
Abstract (arXiv)
Deep neural networks (DNNs) have demonstrated remarkable performance across various tasks, including image and speech recognition. However, maximizing the effectiveness of DNNs requires meticulous optimization of numerous hyperparameters and network parameters through training. Moreover, high-performance DNNs entail many parameters, which consume significant energy during training. In order to overcome these challenges, researchers have turned to spiking neural networks (SNNs), which offer enhanced energy efficiency and biologically plausible data processing capabilities, rendering them highly suitable for sensory data tasks, particularly in neuromorphic data. Despite their advantages, SNNs, like DNNs, are susceptible to various threats, including adversarial examples and backdoor attacks. Yet, the field of SNNs still needs to be explored in terms of understanding and countering these attacks. This paper delves into backdoor attacks in SNNs using neuromorphic datasets and diverse triggers. Specifically, we explore backdoor triggers within neuromorphic data that can manipulate their position and color, providing a broader scope of possibilities than conventional triggers in domains like images. We present various attack strategies, achieving an attack success rate of up to 100% while maintaining a negligible impact on clean accuracy. Furthermore, we assess these attacks' stealthiness, revealing that our most potent attacks possess significant stealth capabilities. Lastly, we adapt several state-of-the-art defenses from the image domain, evaluating their efficacy on neuromorphic data and uncovering instances where they fall short, leading to compromised performance.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 35 of its 78 references that are in the map. First posted on arXiv 13 Feb 2023.
Builds on
35 of 78 references.
References · 35
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2013Intriguing properties of neural networkscited by 5,155
- 2015Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Codingcited by 2,329
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2013Speech Recognition with Deep Recurrent Neural Networkscited by 669
- 2019Surrogate Gradient Learning in Spiking Neural Networkscited by 626
- 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 580
- 2018Spectral Signatures in Backdoor Attackscited by 484
- 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 459
- 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 456
- 2019A Survey of Autonomous Driving: Common Practices and Emerging Technologiescited by 379
23 more
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
- 2020Incorporating Learnable Membrane Time Constant to Enhance Learning of Spiking Neural Networkscited by 345
- 2021Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networkscited by 324
- 2015Converting Static Image Datasets to Spiking Neuromorphic Datasets Using Saccadescited by 314
- 2020Input-Aware Dynamic Backdoor Attackcited by 313
- 2018Deep Learning in Spiking Neural Networkscited by 263
- 2021Training Spiking Neural Networks Using Lessons From Deep Learningcited by 259
- 2018The Multi Vehicle Stereo Event Camera Dataset: An Event Camera Dataset for 3D Perceptioncited by 254
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
- 2016Training Deep Spiking Neural Networks using Backpropagationcited by 205
- 2018Event-based Vision meets Deep Learning on Steering Prediction for Self-driving Carscited by 200
- 2020Blind Backdoors in Deep Learning Modelscited by 182
- 2020Dynamic Backdoor Attacks Against Machine Learning Modelscited by 151
- 2019Bypassing Backdoor Detection Algorithms in Deep Learningcited by 74
- 2021Black-box Detection of Backdoor Attacks with Limited Information and Datacited by 73
- 2020Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attackcited by 64
- 2015Spiking Deep Networks with LIF Neuronscited by 63
- 2021Poison Ink: Robust and Invisible Backdoor Attackcited by 50
- 2021A Spiking Neural Network for Image Segmentationcited by 27
- 2021CarSNN: An Efficient Spiking Neural Network for Event-Based Autonomous Cars on the Loihi Neuromorphic Research Processorcited by 27
- 2020Convolutional Spiking Neural Networks for Spatio-Temporal Feature Extractioncited by 23
- 2020NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flipscited by 21
- 2018Unsupervised Learning with Self-Organizing Spiking Neural Networkscited by 11
Built on by
Citing papers per year: 2023: 1; 2024: 7; 2025: 4; 2026: 6.
18 papers.
Sort:
By area:
- 2023SpikingJelly: An open-source machine learning infrastructure platform for spike-based intelligencecited by 169
- 2024BAN: Detecting Backdoors Activated by Adversarial Neuron Noisecited by 8
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networkscited by 5
- 2024Time-Distributed Backdoor Attacks on Federated Spiking Learningcited by 4
- 2024Membership Privacy Evaluation in Deep Spiking Neural Networkscited by 3
- 2024Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Camerascited by 3
- 2024Spikewhisper: Temporal Spike Backdoor Attacks on Federated Neuromorphic Learning over Low-power Devicescited by 2
- 2024Context is the Key: Backdoor Attacks for In-Context Learning with Vision Transformerscited by 2
- 2024LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithmcited by 2
- 2025Edge Intelligence with Spiking Neural Networkscited by 2
- 2025Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networkscited by 1
- 2026Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profitcited by 1
6 more
- 2026Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNscited by 1
- 2025Hyperdimensional Decoding of Spiking Neural Networkscited by 0
- 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Surveycited by 0
- 2026BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuroncited by 0
- 2026PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformerscited by 0
- 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attackscited by 0
- 2026Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs30 Jul 2026
- 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attacks30 Jul 2026
- 2026PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers21 Apr 2026
- 2026Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profit6 Feb 2026
- 2026BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron6 Feb 2026
- 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Survey23 Jan 2026
- 2025Hyperdimensional Decoding of Spiking Neural Networks11 Nov 2025
- 2025Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networks8 Oct 2025
- 2025Edge Intelligence with Spiking Neural Networks18 Jul 2025
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networks20 Mar 2025
- 2024LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm28 Nov 2024
- 2024Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras5 Nov 2024
6 more
- 2024Membership Privacy Evaluation in Deep Spiking Neural Networks28 Sep 2024
- 2024Context is the Key: Backdoor Attacks for In-Context Learning with Vision Transformers6 Sep 2024
- 2024BAN: Detecting Backdoors Activated by Adversarial Neuron Noise30 May 2024
- 2024Spikewhisper: Temporal Spike Backdoor Attacks on Federated Neuromorphic Learning over Low-power Devices27 Mar 2024
- 2024Time-Distributed Backdoor Attacks on Federated Spiking Learning5 Feb 2024
- 2023SpikingJelly: An open-source machine learning infrastructure platform for spike-based intelligence25 Oct 2023
- 2023SpikingJelly: An open-source machine learning infrastructure platform for spike-based intelligencecited by 169
- 2024BAN: Detecting Backdoors Activated by Adversarial Neuron Noisecited by 8
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networkscited by 5
- 2024Time-Distributed Backdoor Attacks on Federated Spiking Learningcited by 4
- 2024Membership Privacy Evaluation in Deep Spiking Neural Networkscited by 3
- 2024Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Camerascited by 3
- 2024Spikewhisper: Temporal Spike Backdoor Attacks on Federated Neuromorphic Learning over Low-power Devicescited by 2
- 2024LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithmcited by 2
- 2025Edge Intelligence with Spiking Neural Networkscited by 2
- 2025Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networkscited by 1
- 2026Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNscited by 1
- 2025Hyperdimensional Decoding of Spiking Neural Networkscited by 0
12 most cited of 15 All 15 (JSON)
- 2026Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs30 Jul 2026
- 2026Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attacks30 Jul 2026
- 2026BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron6 Feb 2026
- 2026Emerging Threats and Countermeasures in Neuromorphic Systems: A Survey23 Jan 2026
- 2025Hyperdimensional Decoding of Spiking Neural Networks11 Nov 2025
- 2025Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networks8 Oct 2025
- 2025Edge Intelligence with Spiking Neural Networks18 Jul 2025
- 2025Input-Triggered Hardware Trojan Attack on Spiking Neural Networks20 Mar 2025
- 2024LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm28 Nov 2024
- 2024Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras5 Nov 2024
- 2024Membership Privacy Evaluation in Deep Spiking Neural Networks28 Sep 2024
- 2024BAN: Detecting Backdoors Activated by Adversarial Neuron Noise30 May 2024
12 newest of 15 All 15 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026T-Backdoor: Exploiting Temporal Redundancy in Neuromorphic Data for Spike-preserving Backdoor Attacks on SNNs ↗
- 2024Data Poisoning-based Backdoor Attack Framework against Supervised Learning Rules of Spiking Neural Networks
- 2024Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study
- 2025On the Privacy Risks of Spiking Neural Networks: A Membership Inference Analysis
- 2024Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks
- 2026SpikeTimer: Exploring Active Copyright Protection in Spiking Neural Networks via Temporal Backdoor Regularization
- 2025On the Privacy-Preserving Properties of Spiking Neural Networks with Unique Surrogate Gradients and Quantization Levels
- 2024A Practical Trigger-Free Backdoor Attack on Neural Networks ↗