aiqbench analysis
This research investigates the intrinsic relationship between gradient sparsity and adversarial robustness in Spiking Neural Networks, revealing a critical trade-off where sparse gradients enhance attack resistance but may compromise generalization. The study demonstrates that certain SNN architectures naturally achieve state-of-the-art defense performance without explicit regularization, offering new insights into training dynamics for energy-efficient AI systems.
Quantifying How Training Gradient Sparsity Affect Spiking Neural Network Accuracy And Robustness
arXiv:2509.23762v4 Announce Type: replace-cross Abstract: Spiking Neural Networks (SNNs) have recently received increasing attention in both computational neuroscience and artificial intelligence owing to their potential for energy-efficient computation and reduced memory requirements. Despite these advantages, improving adversarial robustness in SNNs (particularly for vision-based applications) remains an emerging and relatively underexplored research problem. Recent work has suggested that encouraging sparse gradients can act as a regularization mechanism to improve resistance against adversarial perturbations. In this study, we report an unexpected observation: under certain architectural configurations, SNNs inherently exhibit sparse gradients and can attain state-of-the-art adversarial defense performance without requiring any explicit regularization strategy. Further investigation reveals an inherent trade-off between robustness and generalization. Specifically, increased gradient sparsity enhances resistance to adversarial attacks but may reduce the model's generalization capability, whereas denser gradients tend to improve generalization while simultaneously increasing susceptibility to adversarial perturbations. These findings provide new perspectives on the role of gradient sparsity in the training dynamics of SNNs.
Abstract:Spiking Neural Networks (SNNs) have recently received increasing attention in both computational neuroscience and artificial intelligence owing to their potential for energy-efficient computation and reduced memory requirements. Despite these advantages, improving adversarial robustness in SNNs (particularly for vision-based applications) remains an emerging and relatively underexplored research problem. Recent work has suggested that encouraging sparse gradients can act as a regularization mechanism to improve resistance against adversarial perturbations. In this study, we report an unexpected observation: under certain architectural configurations, SNNs inherently exhibit sparse gradients and can attain state-of-the-art adversarial defense performance without requiring any explicit regularization strategy. Further investigation reveals an inherent trade-off between robustness and generalization. Specifically, increased gradient sparsity enhances resistance to adversarial attacks but may reduce the model's generalization capability, whereas denser gradients tend to improve generalization while simultaneously increasing susceptibility to adversarial perturbations. These findings provide new perspectives on the role of gradient sparsity in the training dynamics of SNNs.
Neural and Evolutionary Computing (cs.NE); Artificial Intelligence (cs.AI); Computer Vision and Pattern Recognition (cs.CV)
arXiv:2509.23762 [cs.NE]
(or arXiv:2509.23762v4 [cs.NE] for this version)
https://doi.org/10.48550/arXiv.2509.23762 Focus to learn more arXiv-issued DOI via DataCite
https://doi.org/10.1016/j.procs.2026.08.228 Focus to learn more DOI(s) linking to related resources
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 267 words
Related coverage
Activation-Energy Pruning for Spiking Neural Networks: Unsupervised Personalization via Spike-Count Saliency
arXiv · Sep 23, 2026

PIRAMID: Progress and Plans
LessWrong · Jul 27, 2026
Otters++: A Time-to-first-spike Based Energy Efficient Optical Spiking Transformer
arXiv · Jun 12, 2026
ChronoSpike: An Adaptive Spiking Graph Neural Network for Dynamic Graphs
arXiv · Oct 5, 2026