Abstract:The burgeoning fields of machine learning (ML) and quantum machine learning (QML) have shown remarkable potential in tackling complex problems across various domains. However, their susceptibility to adversarial attacks raises concerns when deploying these systems in security sensitive applications. In this study, we present a comparative analysis of the vulnerability of ML and QML models, specifically conventional neural networks (NN) and quantum neural networks (QNN), to adversarial attacks using a malware dataset. We utilize a software supply chain attack dataset known as ClaMP and develop two distinct models for QNN and NN, employing Pennylane for quantum implementations and TensorFlow and Keras for traditional implementations. Our methodology involves crafting adversarial samples by introducing random noise to a small portion of the dataset and evaluating the impact on the models performance using accuracy, precision, recall, and F1 score metrics. Based on our observations, both ML and QML models exhibit vulnerability to adversarial attacks. While the QNNs accuracy decreases more significantly compared to the NN after the attack, it demonstrates better performance in terms of precision and recall, indicating higher resilience in detecting true positives under adversarial conditions. We also find that adversarial samples crafted for one model type can impair the performance of the other, highlighting the need for robust defense mechanisms. Our study serves as a foundation for future research focused on enhancing the security and resilience of ML and QML models, particularly QNN, given its recent advancements. A more extensive range of experiments will be conducted to better understand the performance and robustness of both models in the face of adversarial attacks.

secml: A Python Library for Secure and Explainable Machine Learning

AdversariaLib: An Open-source Library for the Security Evaluation of Machine Learning Algorithms Under Attack

Security and Machine Learning in the Real World

Towards the Science of Security and Privacy in Machine Learning

ModSec-Learn: Boosting ModSecurity with Machine Learning

NoiSec: Harnessing Noise for Security against Adversarial and Backdoor Attacks

Explanation-Guided Diagnosis of Machine Learning Evasion Attacks

AdvSecureNet: A Python Toolkit for Adversarial Machine Learning

Investigating Adversarial Attacks in Software Analytics via Machine Learning Explainability

Safe machine learning model release from Trusted Research Environments: The SACRO-ML package

SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks

SoK: Explainable Machine Learning for Computer Security Applications

Data-Driven Security Analysis of Machine Learning Systems

SecureML: A System for Scalable Privacy-Preserving Machine Learning

Exploring the Vulnerabilities of Machine Learning and Quantum Machine Learning to Adversarial Attacks using a Malware Dataset: A Comparative Analysis

Security Matters: A Survey on Adversarial Machine Learning

A deep learning anomaly detection framework with explainability and robustness

SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models

A Marauder's Map of Security and Privacy in Machine Learning

Explainable and Transferable Adversarial Attack for ML-Based Network Intrusion Detectors

Explainability-Informed Targeted Malware Misclassification