arXiv:2508.13812cs.CVcs.NE2025-08AAAI

提出新型脉冲神经网络攻击方法,显著降低攻击延迟。

Timestep-Compressed Attack on Spiking Neural Networks through Timestep-Level Backpropagation

  • 通过逐时间步反向传播,实现早期停止,减少计算耗时。
  • 重用初始时间步膜电位,避免无效预热计算,提升效率。
  • 适用于实时防御评估,尤其适合高时效性场景研究者。

当前最先进的基于梯度的脉冲神经网络(SNN)对抗攻击方法主要依赖于FGSM和PGD框架的扩展,面临严重的攻击延迟问题,源于多时间步处理机制,难以用于实际实时应用。这一低效性源于其直接沿用人工神经网络范式的设计,未能充分利用SNN的关键特性。本文提出时间步压缩攻击(TCA),显著降低攻击延迟。TCA基于对SNN行为的两个关键发现:首先,逐时间步反向传播(TLBP)表明,反向传播中的全局时间信息并非攻击成功的关键,从而支持按时间步独立评估并实现早期停止;其次,对抗膜电位重用(A-MPR)源于观察到初始时间步存在膜电位积累的低效预热阶段,可预先计算并复用。在VGG-11与ResNet-17模型上,针对CIFAR-10/100及CIFAR10-DVS数据集的实验表明,TCA在白盒与黑盒设置下分别将攻击延迟降低最多56.6%和57.1%,同时保持相近的攻击成功率。

原文摘要 · Abstract (English)

State-of-the-art (SOTA) gradient-based adversarial attacks on spiking neural networks (SNNs), which largely rely on extending FGSM and PGD frameworks, face a critical limitation: substantial attack latency from multi-timestep processing, rendering them infeasible for practical real-time applications. This inefficiency stems from their design as direct extensions of ANN paradigms, which fail to exploit key SNN properties. In this paper, we propose the timestep-compressed attack (TCA), a novel framework that significantly reduces attack latency. TCA introduces two components founded on key insights into SNN behavior. First, timestep-level backpropagation (TLBP) is based on our finding that global temporal information in backpropagation to generate perturbations is not critical for an attack's success, enabling per-timestep evaluation for early stopping. Second, adversarial membrane potential reuse (A-MPR) is motivated by the observation that initial timesteps are inefficiently spent accumulating membrane potential, a warm-up phase that can be pre-calculated and reused. Our experiments on VGG-11 and ResNet-17 with the CIFAR-10/100 and CIFAR10-DVS datasets show that TCA significantly reduces the required attack latency by up to 56.6% and 57.1% compared to SOTA methods in white-box and black-box settings, respectively, while maintaining a comparable attack success rate.

脉冲神经网络对抗攻击延迟优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。