Abstract:Adversarial machine learning is an emerging field that focuses on studying vulnerabilities of machine learning approaches in adversarial settings and developing techniques accordingly to make learning robust to adversarial manipulations. It plays a vital role in various machine learning applications and has attracted tremendous attention across different communities recently. In this paper, we explore different adversarial scenarios in the context of quantum machine learning. We find that, similar to traditional classifiers based on classical neural networks, quantum learning systems are likewise vulnerable to crafted adversarial examples, independent of whether the input data is classical or quantum. In particular, we find that a quantum classifier that achieves nearly the state-of-the-art accuracy can be conclusively deceived by adversarial examples obtained via adding imperceptible perturbations to the original legitimate samples. This is explicitly demonstrated with quantum adversarial learning in different scenarios, including classifying real-life images (e.g., handwritten digit images in the dataset MNIST), learning phases of matter (such as, ferromagnetic/paramagnetic orders and symmetry protected topological phases), and classifying quantum data. Furthermore, we show that based on the information of the adversarial examples at hand, practical defense strategies can be designed to fight against a number of different attacks. Our results uncover the notable vulnerability of quantum machine learning systems to adversarial perturbations, which not only reveals a novel perspective in bridging machine learning and quantum physics in theory but also provides valuable guidance for practical applications of quantum classifiers based on both near-term and future quantum technologies.

Artificial Key Fingerprints for Continuous-Variable Quantum Key Distribution

Deep-learning-based continuous attacks on quantum key distribution protocols

Automatically identifying imperfections and attacks in practical quantum key distribution systems via machine learning

Mitigation of Channel Tampering Attacks in Continuous-Variable Quantum Key Distribution

General multi-attack detection for continuous-variable quantum key distribution with local local oscillator

Withstanding detector attacks in continuous-variable quantum key distribution via mean-restricted unary linear regression

Perceiving Quantum Hacking for Quantum Key Distribution Using Temporal Ghost Imaging

High-rate discretely-modulated continuous-variable quantum key distribution using quantum machine learning

Quantum Adversarial Machine Learning

Experimental quantum adversarial learning with programmable superconducting qubits

Discrete-modulated continuous-variable quantum key distribution secure against general attacks

Quantum hacking: Induced-photorefraction attack on a practical continuous-variable quantum key distribution system

Neural network-powered nonlinear compensation framework for high-speed continuous variable quantum key distribution

Empirical Risk-aware Machine Learning on Trojan-Horse Detection for Trusted Quantum Key Distribution Networks

Automated machine learning for secure key rate in discrete-modulated continuous-variable quantum key distribution

Enhancing Quantum Adversarial Robustness by Randomized Encodings

Deep-Learning-Based Radio-Frequency Side-Channel Attack on Quantum Key Distribution

Experimental Quantum Key Distribution Secure Against Malicious Devices

Quantum Hacking of a Continuous-Variable Quantum-Key-distribution System Using a Wavelength Attack

Quantum Adversarial Learning for Kernel Methods

Evaluating Efficacy of Model Stealing Attacks and Defenses on Quantum Neural Networks