Abstract:Adversarial machine learning is an emerging field that focuses on studying vulnerabilities of machine learning approaches in adversarial settings and developing techniques accordingly to make learning robust to adversarial manipulations. It plays a vital role in various machine learning applications and has attracted tremendous attention across different communities recently. In this paper, we explore different adversarial scenarios in the context of quantum machine learning. We find that, similar to traditional classifiers based on classical neural networks, quantum learning systems are likewise vulnerable to crafted adversarial examples, independent of whether the input data is classical or quantum. In particular, we find that a quantum classifier that achieves nearly the state-of-the-art accuracy can be conclusively deceived by adversarial examples obtained via adding imperceptible perturbations to the original legitimate samples. This is explicitly demonstrated with quantum adversarial learning in different scenarios, including classifying real-life images (e.g., handwritten digit images in the dataset MNIST), learning phases of matter (such as, ferromagnetic/paramagnetic orders and symmetry protected topological phases), and classifying quantum data. Furthermore, we show that based on the information of the adversarial examples at hand, practical defense strategies can be designed to fight against a number of different attacks. Our results uncover the notable vulnerability of quantum machine learning systems to adversarial perturbations, which not only reveals a novel perspective in bridging machine learning and quantum physics in theory but also provides valuable guidance for practical applications of quantum classifiers based on both near-term and future quantum technologies.

Adversarial examples detection based on quantum fuzzy convolution neural network

Quantum Similarity Testing with Convolutional Neural Networks.

Quantum Adversarial Machine Learning

Universal Adversarial Examples and Perturbations for Quantum Classifiers

VQCNN: variational quantum convolutional neural networks based on quantum filters and fully connected layers

Quantum Adversarial Attacks: Developing Quantum FGSM Algorithm

Experimental quantum adversarial learning with programmable superconducting qubits

Towards quantum enhanced adversarial robustness in machine learning

Quantum Algorithms for Feedforward Neural Networks

Quantum Adversarial Learning for Kernel Methods

Universal adversarial perturbations for multiple classification tasks with quantum classifiers

Adversarial Robustness Guarantees for Quantum Classifiers

A hybrid quantum ensemble learning model for malicious code detection

Robustness Verification of Quantum Classifiers

Adversarial Learning in Quantum Artificial Intelligence

A Modified Lightweight Quantum Convolutional Neural Network For Malicious Code Detection

Quantum metric learning with fuzzy-informed learning

Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise

A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Models

Quantum Neural Networks under Depolarization Noise: Exploring White-Box Attacks and Defenses

Security intrusion detection using quantum machine learning techniques