notesum.ai
Published at November 5Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras
cs.CR
cs.AI
Released Date: November 5, 2024
Authors: Roberto Riaño, Gorka Abad1, Stjepan Picek2, Aitor Urbieta3
Aff.: 1Radboud University, The Netherlands; Ikerlan Research Centre, Spain; 2Radboud University, The Netherlands; 3Ikerlan Research Centre, Spain
| Dataset | Size | Attack | Poisoned Frames | Ini CA% | I ASR% | Pruned CA% | Pruned ASR% | FT epochs | FT CA% | FT ASR% | FP CA% | FP ASR% | |
| DVS128-Gesture | 0.3 | Static | 16 | 90.62 0.35 | 99.08 0.40 | 0.8 | 24.31 13.02 | 9.38 13.84 | 4 | 88.08 2.12 | 68.98 7.29 | 86.34 1.75 | 17.71 3.63 |
| DVS128-Gesture | 0.3 | Framed | 12 | 91.20 1.00 | 99.08 0.20 | 0.8 | 31.60 3.67 | 8.94 11.09 | 4 | 89.70 1.64 | 70.25 5.95 | 90.74 2.44 | 21.99 1.56 |
| DVS128-Gesture | 0.3 | Framed | 6 | 89.47 1.56 | 54.63 35.50 | 0.8 | 41.90 5.88 | 9.49 14.94 | 4 | 85.88 5.23 | 14.59 3.31 | 87.96 3.11 | 10.19 2.26 |
| DVS128-Gesture | 0.3 | Strobing | 6 | 89.00 1.56 | 97.80 0.87 | 0.8 | 22.55 3.75 | 0.70 0.92 | 4 | 87.15 3.62 | 21.30 16.47 | 89.47 1.71 | 11.11 4.52 |
| DVS128-Gesture | 1 | Flash | 6 | 90.20 0.92 | 99.54 0.53 | 0.8 | 48.38 12.14 | 99.54 0.80 | 4 | 86.34 2.63 | 47.22 19.95 | 86.80 3.31 | 14.82 4.18 |
| DVS128-Gesture | 1 | Flash | 3 | 87.61 1.91 | 96.64 4.07 | 0.8 | 36.81 15.14 | 69.91 40.36 | 4 | 87.62 0.87 | 15.63 5.46 | 81.25 1.59 | 8.68 1.39 |
| DVS128-Gesture | 1 | Str. Flash | 3 | 88.31 2.81 | 90.28 15.04 | 0.8 | 35.53 7.46 | 55.90 42.02 | 4 | 89.46 1.22 | 23.61 12.28 | 87.50 2.84 | 8.45 1.11 |
| NMnist | 0.3 | Static | 16 | 99.28 0.03 | 99.97 0.00 | 0.8 | 88.60 9.19 | 99.35 0.97 | 2 | 99.05 0.12 | 99.93 0.07 | 98.81 0.12 | 32.99 15.03 |
| NMnist | 0.3 | Framed | 10 | 99.28 0.03 | 99.97 0.00 | 0.8 | 85.20 7.74 | 99.06 0.60 | 2 | 99.08 0.11 | 99.97 0.01 | 98.72 0.25 | 28.42 15.73 |
| NMnist | 0.3 | Framed | 5 | 99.24 0.03 | 99.97 0.01 | 0.8 | 92.28 2.80 | 81.37 28.70 | 2 | 99.19 0.03 | 99.97 0.07 | 98.80 0.13 | 21.84 2.56 |
| NMnist | 0.3 | Strobing | 5 | 99.29 0.04 | 99.97 0.01 | 0.8 | 79.21 6.95 | 98.33 2.67 | 2 | 99.01 0.15 | 99.83 0.25 | 98.83 0.08 | 49.01 23.06 |
| NMnist | 1 | Flash | 6 | 99.29 0.03 | 99.97 0.02 | 0.8 | 89.01 4.40 | 69.82 52.05 | 2 | 99.05 0.07 | 99.96 0.01 | 98.74 0.16 | 99.95 0.04 |
| NMnist | 1 | Flash | 3 | 99.27 0.02 | 99.97 0.00 | 0.8 | 94.40 2.09 | 78.06 25.44 | 2 | 99.01 0.08 | 99.97 0.01 | 98.87 0.06 | 83.45 20.19 |
| NMnist | 1 | Str. Flash | 3 | 99.30 0.02 | 99.96 0.01 | 0.8 | 87.26 9.32 | 69.35 48.22 | 2 | 99.02 0.23 | 99.95 0.06 | 98.82 0.13 | 60.95 40.13 |
| Cifar10-DVS | 0.3 | Static | 16 | 67.47 0.78 | 95.83 0.06 | 0.8 | 33.27 1.63 | 70.80 16.75 | 2 | 65.93 0.95 | 85.30 2.43 | 65.20 1.51 | 29.43 13.31 |
| Cifar10-DVS | 0.3 | Framed | 10 | 67.30 0.90 | 95.67 0.06 | 0.8 | 27.53 0.74 | 92.67 2.25 | 2 | 66.13 0.85 | 90.87 6.20 | 65.23 1.52 | 56.57 12.68 |
| Cifar10-DVS | 0.3 | Framed | 5 | 66.33 0.61 | 95.60 0.10 | 0.8 | 28.07 2.11 | 94.40 0.92 | 2 | 64.37 1.02 | 87.63 6.55 | 62.70 3.05 | 64.83 5.18 |
| Cifar10-DVS | 0.3 | Strobing | 5 | 66.20 0.72 | 95.57 0.21 | 0.8 | 30.23 2.25 | 94.80 2.30 | 2 | 64.30 1.54 | 95.23 2.51 | 63.67 1.16 | 95.40 0.89 |
| Cifar10-DVS | 1 | Flash | 6 | 63.40 0.98 | 95.87 0.15 | 0.8 | 11.07 1.22 | 99.90 0.17 | 2 | 61.67 1.47 | 95.40 0.17 | 63.03 1.16 | 95.40 0.89 |
| Cifar10-DVS | 1 | Flash | 3 | 63.97 0.93 | 95.57 0.42 | 0.8 | 17.20 9.68 | 98.50 2.18 | 2 | 62.77 1.00 | 85.90 9.01 | 61.60 0.17 | 55.73 10.23 |
| Cifar10-DVS | 1 | Str. Flash | 3 | 64.47 1.12 | 95.53 0.21 | 0.8 | 12.30 3.64 | 99.87 0.23 | 2 | 61.63 1.80 | 95.80 0.26 | 63.70 0.85 | 92.30 4.16 |