TY - JOUR
T1 - SpyKing—Privacy-preserving framework for Spiking Neural Networks
AU - Nikfam, Farzad
AU - Marchisio, Alberto
AU - Martina, Maurizio
AU - Shafique, Muhammad
N1 - Publisher Copyright:
Copyright © 2025 Nikfam, Marchisio, Martina and Shafique.
PY - 2025
Y1 - 2025
N2 - Artificial intelligence (AI) models, frequently built using deep neural networks (DNNs), have become integral to many aspects of modern life. However, the vast amount of data they process is not always secure, posing potential risks to privacy and safety. Fully Homomorphic Encryption (FHE) enables computations on encrypted data while preserving its confidentiality, making it a promising approach for privacy-preserving AI. This study evaluates the performance of FHE when applied to DNNs and compares it with Spiking Neural Networks (SNNs), which more closely resemble biological neurons and, under certain conditions, may achieve superior results. Using the SpyKing framework, we analyze key challenges in encrypted neural computations, particularly the limitations of FHE in handling non-linear operations. To ensure a comprehensive evaluation, we conducted experiments on the MNIST, FashionMNIST, and CIFAR10 datasets while systematically varying encryption parameters to optimize SNN performance. Our results show that FHE significantly increases computational costs but remains viable in terms of accuracy and data security. Furthermore, SNNs achieved up to 35% higher absolute accuracy than DNNs on encrypted data with low values of the plaintext modulus t. These findings highlight the potential of SNNs in privacy-preserving AI and underscore the growing need for secure yet efficient neural computing solutions.
AB - Artificial intelligence (AI) models, frequently built using deep neural networks (DNNs), have become integral to many aspects of modern life. However, the vast amount of data they process is not always secure, posing potential risks to privacy and safety. Fully Homomorphic Encryption (FHE) enables computations on encrypted data while preserving its confidentiality, making it a promising approach for privacy-preserving AI. This study evaluates the performance of FHE when applied to DNNs and compares it with Spiking Neural Networks (SNNs), which more closely resemble biological neurons and, under certain conditions, may achieve superior results. Using the SpyKing framework, we analyze key challenges in encrypted neural computations, particularly the limitations of FHE in handling non-linear operations. To ensure a comprehensive evaluation, we conducted experiments on the MNIST, FashionMNIST, and CIFAR10 datasets while systematically varying encryption parameters to optimize SNN performance. Our results show that FHE significantly increases computational costs but remains viable in terms of accuracy and data security. Furthermore, SNNs achieved up to 35% higher absolute accuracy than DNNs on encrypted data with low values of the plaintext modulus t. These findings highlight the potential of SNNs in privacy-preserving AI and underscore the growing need for secure yet efficient neural computing solutions.
KW - Deep Neural Network (DNN)
KW - Homomorphic Encryption (HE)
KW - LeNet5
KW - Spiking Neural Network (SNN)
KW - machine learning
KW - privacy-preserving
KW - safety
KW - security
UR - http://www.scopus.com/inward/record.url?scp=105008004663&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=105008004663&partnerID=8YFLogxK
U2 - 10.3389/fnins.2025.1551143
DO - 10.3389/fnins.2025.1551143
M3 - Article
AN - SCOPUS:105008004663
SN - 1662-4548
VL - 19
JO - Frontiers in Neuroscience
JF - Frontiers in Neuroscience
M1 - 1551143
ER -