As social robots increasingly integrate into various sectors, concerns over privacy and security become paramount. Social robots, while capable of processing and interacting with sensitive user data, often face significant limitations in processing power and energy efficiency. Spiking Neural Networks (SNNs), inspired by biological neurons, provide a promising solution by offering efficient temporal processing with reduced energy consumption. However, similar to conventional Artificial Neural Networks (ANNs), SNNs are vulnerable to privacy attacks, such as model inversion and membership inference, which can expose sensitive training data. We proposes the use of Differential Privacy (DP) to safeguard user data in SNN models for social robots. We train two models on the MNIST dataset: a baseline SNN and a differentially private SNN (DP-SNN). We evaluate both models through a privacy attacks, demonstrating how differentially private SNNs mitigate data leakage. We assess the ability of DP-SNNs to withstand malicious inputs, showing that the noise introduced by differential privacy enhances robustness in addition to privacy preservation. Our results indicate that differentially private SNNs not only maintain strong privacy guarantees but also improve resilience against adversarial attacks, making them an ideal solution for social robots where both data security and processing efficiency are critical.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Differentially Private Spiking Neural Networks: Enhancing Privacy and Robustness in Social Robotics

  • Muhammad Aitsam,
  • Samiulhaq Chardiwall,
  • Alessandro Di Nuovo

摘要

As social robots increasingly integrate into various sectors, concerns over privacy and security become paramount. Social robots, while capable of processing and interacting with sensitive user data, often face significant limitations in processing power and energy efficiency. Spiking Neural Networks (SNNs), inspired by biological neurons, provide a promising solution by offering efficient temporal processing with reduced energy consumption. However, similar to conventional Artificial Neural Networks (ANNs), SNNs are vulnerable to privacy attacks, such as model inversion and membership inference, which can expose sensitive training data. We proposes the use of Differential Privacy (DP) to safeguard user data in SNN models for social robots. We train two models on the MNIST dataset: a baseline SNN and a differentially private SNN (DP-SNN). We evaluate both models through a privacy attacks, demonstrating how differentially private SNNs mitigate data leakage. We assess the ability of DP-SNNs to withstand malicious inputs, showing that the noise introduced by differential privacy enhances robustness in addition to privacy preservation. Our results indicate that differentially private SNNs not only maintain strong privacy guarantees but also improve resilience against adversarial attacks, making them an ideal solution for social robots where both data security and processing efficiency are critical.