Abstract:Adversarial machine learning is an emerging field that focuses on studying vulnerabilities of machine learning approaches in adversarial settings and developing techniques accordingly to make learning robust to adversarial manipulations. It plays a vital role in various machine learning applications and has attracted tremendous attention across different communities recently. In this paper, we explore different adversarial scenarios in the context of quantum machine learning. We find that, similar to traditional classifiers based on classical neural networks, quantum learning systems are likewise vulnerable to crafted adversarial examples, independent of whether the input data is classical or quantum. In particular, we find that a quantum classifier that achieves nearly the state-of-the-art accuracy can be conclusively deceived by adversarial examples obtained via adding imperceptible perturbations to the original legitimate samples. This is explicitly demonstrated with quantum adversarial learning in different scenarios, including classifying real-life images (e.g., handwritten digit images in the dataset MNIST), learning phases of matter (such as, ferromagnetic/paramagnetic orders and symmetry protected topological phases), and classifying quantum data. Furthermore, we show that based on the information of the adversarial examples at hand, practical defense strategies can be designed to fight against a number of different attacks. Our results uncover the notable vulnerability of quantum machine learning systems to adversarial perturbations, which not only reveals a novel perspective in bridging machine learning and quantum physics in theory but also provides valuable guidance for practical applications of quantum classifiers based on both near-term and future quantum technologies.

Adiabatic quantum learning

Quantum Ensemble Learning with a Programmable Superconducting Processor

Learning quantum operator by quantum adiabatic computation

Provably Efficient Adiabatic Learning for Quantum-Classical Dynamics

Nondeterministic Quantum Computation Via Ground State Cooling and Ultrafast Grover Algorithm

End-To-End Quantum Machine Learning Implemented with Controlled Quantum Dynamics

A noise-robust quantum dynamics learning protocol based on Choi-Jamiolkowski Isomorphism: theory and experiment

Adiabatic quantum imaginary time evolution

Adiabatic training for Variational Quantum Algorithms

Experimental quantum adversarial learning with programmable superconducting qubits

Learning in Quantum Control: High-Dimensional Global Optimization for Noisy Quantum Dynamics

The power and limitations of learning quantum dynamics incoherently

On exploring the potential of quantum auto-encoder for learning quantum systems

Quantum counterdiabatic driving with local control

Adversarial Learning in Quantum Artificial Intelligence

Experimental implementation of local adiabatic evolution algorithms by an NMR quantum information processor

Machine-learning-inspired quantum optimal control of nonadiabatic geometric quantum computation via reverse engineering

Training Neural Networks with Universal Adiabatic Quantum Computing

Experimental Quantum Hamiltonian Learning

Quantum Adversarial Machine Learning

Learning Robust and High-Precision Quantum Controls