2026· IEEE Transactions on Signal Processing· Vol 74, pp. 3470-3486· 0 citations· 50 references
Computer Science
Abstract
The robustness of deep learning-based semantic communication systems remains a major challenge due to the vulnerability of artificial neural networks (ANNs) to adversarial attacks and the lack of clear robustness mechanisms in such models. Existing approaches often rely on data augmentation, which is training-intensive and requires prior knowledge of the perturbation distribution. In this paper, we instead leverage the structural properties of spiking neural networks (SNNs), a class of energy-efficient, brain-inspired models that compute using binary spikes. We exploit their inherent resilience enabled by the discrete and thresholded nature of spikes and analyze robustness from a structural perspective. For both random and adversarial perturbations, we identify two key factors: 1) membrane potentials should be kept away from the firing threshold to reduce spike flipping; and 2) synaptic weights should be regularized to prevent the amplification of perturbations across layers. Based on these observations, we propose robustness-aware potential (RAP), a simple regularizer designed to exploit the inherent robustness of SNNs. We evaluate our method on both digital and event-based datasets. Experimental results show that SNNs trained with RAP significantly improve robustness and exhibit better resilience to distributional shifts. Moreover, SNNs demonstrate a clear robustness advantage over ANNs, particularly under adversarial attacks.
A novel SNN named arbitrary distribution injection is proposed, which enables distribution modeling from nonpredefined, data-dependent distributions and introduces a conditional stochastic feature mapping mechanism to model feature distributions, together with a theoretically grounded variance-regularization loss.
Rui Zhou, Hao Yang, Wen-Xu Wang et al.· IEEE Transactions on Neural...· 0 citations
Experimental results validate the effectiveness of the structure-adaptive threshold mechanism for low-power spiking graph learning and design an alternating soft-fusion-hard-grouping training strategy that decouples structure-aware threshold generation from pattern-specific threshold optimization.
Zehan Li, Yingyi Li, Juntao Zhang et al.· International Journal of Inf...· 0 citations
This work develops a per-sample sponge attack that crafts a custom adversarial spike train for each input via gradient-based optimization and introduces the first universal sponge attack for native event-based SNN inputs: a fixed binary perturbation computed offline and applied via XOR to all subsequent inputs.
Spyridon Raptis, H. Stratigopoulos· arXiv.org· 0 citations
A method to analyze ANNs designed for image classification from an adversarial robustness perspective and implemented an ablation and fine-tuning strategy that successfully boosted the robustness of the ANNs against a variant of the Auto-PGD attack under different threat models.
Spiking neural networks (SNNs) offer an energy-efficient alternative to conventional deep neural networks by exploiting sparse event-driven computation, but their training remains challenging because the non-differentiable spike function requires surrogate gradients whose fixed shape may be suboptimal across layers and...
Mutual Heterogeneous Learning (MHL) is proposed, a framework enabling robust pruning via single-model inference that significantly outperforms single-model baselines in both adversarial robustness and corruption robustness, while maintaining competitive clean accuracy.
Jin-Hui Yu, Zikai Zhang, Khaled A. Harras et al.· Proceedings of the Thirty-Fi...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.