Random heterogeneous spiking neural network for adversarial defense

Spiking neural networks (SNNs) offer a biologically inspired alternative to artificial neural networks (ANNs) by mimicking neuronal information transmission mechanisms. However, similar to ANNs, SNNs remain susceptible to adversarial examples, raising concerns about their robustness in practical applications. To address this vulnerability, we propose the Random Heterogeneous Spiking Neural Network (RandHet-SNN), inspired by the heterogeneity and stochasticity observed in biological neural systems. This architecture strengthens the network's defense against adversarial attacks by introducing neuron-level diversity through randomized time decay constants, allowing each neuron to acquire unique temporal properties at every forward pass. We evaluate RandHet-SNN's performance through extensive experiments with various adversarial attacks. Results indicate that RandHet-SNN significantly enhances network robustness while maintaining minimal impact on clean accuracy. RandHet-SNN displays significant potential for robust, energy-efficient neural computing in adversarial environments.

Authors

Institutions

Publication Details

Journal
iScience
Published
2025-05-14
DOI
https://doi.org/10.1016/j.isci.2025.112660
Primary Topic
Advanced Memory and Neural Computing
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Random heterogeneous spiking neural network for adversarial defense

Dongcheng Zhao, Yi Zeng, Chengcheng Du, Jihang Wang et al.
iScience
Advanced Memory and Neural Computing
article

Random heterogeneous spiking neural network for adversarial defense

Dongcheng Zhao, Yi Zeng, Chengcheng Du, Jihang Wang, Xiang He, Qian Zhang
article en

Abstract

Spiking neural networks (SNNs) offer a biologically inspired alternative to artificial neural networks (ANNs) by mimicking neuronal information transmission mechanisms. However, similar to ANNs, SNNs remain susceptible to adversarial examples, raising concerns about their robustness in practical applications. To address this vulnerability, we propose the Random Heterogeneous Spiking Neural Network (RandHet-SNN), inspired by the heterogeneity and stochasticity observed in biological neural systems. This architecture strengthens the network's defense against adversarial attacks by introducing neuron-level diversity through randomized time decay constants, allowing each neuron to acquire unique temporal properties at every forward pass. We evaluate RandHet-SNN's performance through extensive experiments with various adversarial attacks. Results indicate that RandHet-SNN significantly enhances network robustness while maintaining minimal impact on clean accuracy. RandHet-SNN displays significant potential for robust, energy-efficient neural computing in adversarial environments.

iScienceVol. 28(6)
Beijing Academy of Artificial Intelligence (CN), Institute of Automation (CN), Nuclear and Radiation Safety Center (CN), Shanghai Center for Brain Science and Brain-Inspired Technology (CN), University of Chinese Academy of Sciences (CN), Chinese Academy of Governance (CN)
National Natural Science Foundation of China, Natural Science Foundation of Beijing Municipality
Openalex Percentile: Top 91%
Advanced Memory and Neural Computing
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Random heterogeneous spiking neural network for adversarial defense — Dongcheng Zhao, Yi Zeng, et al. · iScience (2025) | TGRS Research Map | TGRS