Robustness of classification ability of spiking neural networks