一种生物视觉启发的高鲁棒性脉冲循环神经网络模型OA
A Highly Robust Spiking Recurrent Neural Network Model Inspired by Biological Vision
针对脉冲神经网络(spike neural networks,SNN)在对抗攻击下表现出的低鲁棒性问题,提出一种受生物视觉启发的高鲁棒性脉冲循环神经网络模型.该模型引入了初级视觉皮层V1区域的生物机制,设计了一个受到生物约束的卷积SNN前端.此外,通过结合视觉信息在皮层中的反馈连接,构建了具有内部循环机制的SNN后端.在无对抗训练的情况下,该模型在基于脉冲频率的快速梯度符号法(fast gradient sign method,FGSM)攻击下,分别在 SVHN,CIFAR10,CIFAR100 数据集上实现了显著提升的对抗准确率,分别提升了 31.6%,22.11%和20.99%.在对抗训练的情况下,其对抗准确率分别提升了20.64%,8.79%和6.89%.随着扰动因子ε和时间窗口T的增加,该模型的准确率始终优于基准模型.实验结果表明,在面对对抗攻击时,融入生物视觉机制的脉冲循环神经网络模型的准确率显著提升,展现出更强的对抗鲁棒性.
To address the low robustness of Spiking Neural Networks(SNN)against adversarial attacks,a highly robust Spiking Recurrent Neural Network model inspired by biological vision was proposed.This model incorporates the biological mechanisms of the primary visual cortex(V1)and features a convolutional SNN front end designed with biological constraints.Additionally,by integrating feedback connections from the corti-cal visual information,an SNN back end with an internal recurrent mechanism was constructed.In the absence of adversarial training,this model demonstrates significant improvements in adversarial accuracy of 31.6%,22.11%,and 20.99%on the SVHN,CIFAR10,and CIFAR100 datasets,respectively.With adversarial training,the adversarial accuracy improves by 20.64%,8.79%,and 6.89%,respectively.Furthermore,as the perturbation factor(ε)and the time window(T)increase,the accuracy of this model consistently surpasses that of the baseline model.Experimental results show that the Spiking Recurrent Neural Network model,which incorporates biological vision mechanisms,shows significantly improved accuracy when faced with adver-sarial attacks,demonstrating enhanced adversarial robustness.
陈林果;黄荣;韩芳
东华大学 信息科学与技术学院,上海 201620东华大学 信息科学与技术学院,上海 201620||东华大学 数字化纺织服装技术教育部工程研究中心,上海 201620东华大学 信息科学与技术学院,上海 201620||宁夏大学 数学统计学院,宁夏 银川 750021
信息技术与安全科学
脉冲神经网络鲁棒性对抗攻击生物视觉
spiking neural networksrobustnessadversarial attacksbiological vision
《宁夏大学学报(自然科学版中英文)》 2026 (1)
24-32,9
国家自然科学基金资助项目(12272092)
评论