arXiv:2508.11279cs.LGcs.CV2025-08AAAI被引 1

提升脉冲神经网络的抗扰性与准确率平衡,通过时间自集成机制。

Boosting the Robustness-Accuracy Trade-off of SNNs by Robust Temporal Self-Ensemble

  • 将SNN视为随时间演化的子网络集合,设计时间自集成训练框架。
  • 在多个基准上实现更优的鲁棒性-准确率权衡,对抗扰动转移显著降低。
  • 适合关注能效计算与脑启发模型鲁棒性的研究者。

脉冲神经网络(SNN)为节能且类脑计算提供了前景,但其对对抗扰动的脆弱性仍不明确。本文从时间集成视角重新审视SNN的鲁棒性,将网络视为离散时间步上的动态子网络集合。该框架揭示了两个未被充分研究的问题:单个时间子网络的脆弱性,以及对抗性漏洞在时间间的传递倾向。为此,我们提出鲁棒时间自集成(RTE)训练框架,同时优化各子网络的鲁棒性并抑制对抗扰动的时间传播。RTE将双重目标整合至统一损失,并采用随机采样策略实现高效优化。在多个基准上的大量实验表明,RTE在鲁棒性-准确率权衡上持续优于现有方法。额外分析显示,RTE重塑了SNN内部的鲁棒性格局,形成更具韧性与时间多样性的决策边界。本研究强调了时间结构在对抗学习中的重要性,为构建稳健的脉冲模型提供了原则性基础。

原文摘要 · Abstract (English)

Spiking Neural Networks (SNNs) offer a promising direction for energy-efficient and brain-inspired computing, yet their vulnerability to adversarial perturbations remains poorly understood. In this work, we revisit the adversarial robustness of SNNs through the lens of temporal ensembling, treating the network as a collection of evolving sub-networks across discrete timesteps. This formulation uncovers two critical but underexplored challenges-the fragility of individual temporal sub-networks and the tendency for adversarial vulnerabilities to transfer across time. To overcome these limitations, we propose Robust Temporal self-Ensemble (RTE), a training framework that improves the robustness of each sub-network while reducing the temporal transferability of adversarial perturbations. RTE integrates both objectives into a unified loss and employs a stochastic sampling strategy for efficient optimization. Extensive experiments across multiple benchmarks demonstrate that RTE consistently outperforms existing training methods in robust-accuracy trade-off. Additional analyses reveal that RTE reshapes the internal robustness landscape of SNNs, leading to more resilient and temporally diversified decision boundaries. Our study highlights the importance of temporal structure in adversarial learning and offers a principled foundation for building robust spiking models.

脉冲神经网络对抗鲁棒性时间建模

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。