SNN比传统神经网络更难泄露数据,天生更适合隐私敏感场景。
Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study
- 用脉冲神经网络替代传统网络,降低数据泄露风险
- 在CIFAR-10上隐私攻击识别率仅0.59(ANN为0.82)
- 适合对隐私要求高的边缘计算和生物启发系统
随着机器学习在敏感领域广泛应用,数据泄露风险日益突出。成员推理攻击(MIA)表明训练模型可能暴露敏感信息。尽管人工神经网络(ANN)主导当前应用,脉冲神经网络(SNN)因其低功耗和事件驱动特性,正成为有前景的替代方案。本文探索SNN是否具备天然隐私保护能力。通过MIA评估不同数据集下SNN与ANN的隐私韧性,分析了学习算法(梯度代理与进化算法)、框架(snnTorch、TENNLab、LAVA)及参数的影响。结果表明,SNN在隐私保护上持续优于ANN,进化算法进一步提升韧性。例如,在CIFAR-10上SNN的AUC为0.59,远低于ANN的0.82;在CIFAR-100上分别为0.58与0.88。此外,结合差分私有随机梯度下降(DPSGD),SNN在相同隐私约束下准确率损失更小。
原文摘要 · Abstract (English)
While machine learning (ML) models are becoming mainstream, especially in sensitive application areas, the risk of data leakage has become a growing concern. Attacks like membership inference (MIA) have shown that trained models can reveal sensitive data, jeopardizing confidentiality. While traditional Artificial Neural Networks (ANNs) dominate ML applications, neuromorphic architectures, specifically Spiking Neural Networks (SNNs), are emerging as promising alternatives due to their low power consumption and event-driven processing, akin to biological neurons. Privacy in ANNs is well-studied; however, little work has explored the privacy-preserving properties of SNNs. This paper examines whether SNNs inherently offer better privacy. Using MIAs, we assess the privacy resilience of SNNs versus ANNs across diverse datasets. We analyze the impact of learning algorithms (surrogate gradient and evolutionary), frameworks (snnTorch, TENNLab, LAVA), and parameters on SNN privacy. Our findings show that SNNs consistently outperform ANNs in privacy preservation, with evolutionary algorithms offering additional resilience. For instance, on CIFAR-10, SNNs achieve an AUC of 0.59, significantly lower than ANNs' 0.82, and on CIFAR-100, SNNs maintain an AUC of 0.58 compared to ANNs' 0.88. Additionally, we explore the privacy-utility trade-off with Differentially Private Stochastic Gradient Descent (DPSGD), finding that SNNs sustain less accuracy loss than ANNs under similar privacy constraints.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。