Robust quantum classifiers via NISQ adversarial learning

Leonardo Banchi

DOI: https://doi.org/10.1038/s43588-022-00359-1

2022-11-29

Nature Computational Science

Abstract:The vulnerability of quantum machine learning is demonstrated on a superconducting quantum computer, together with a defense strategy based on noisy intermediate-scale quantum (NISQ) adversarial learning.

What problem does this paper attempt to address?

Adversarial Robustness Guarantees for Quantum Classifiers

Neil Dowling,Maxwell T. West,Angus Southwell,Azar C. Nakhl,Martin Sevior,Muhammad Usman,Kavan Modi

2024-05-17

Abstract:Despite their ever more widespread deployment throughout society, machine learning algorithms remain critically vulnerable to being spoofed by subtle adversarial tampering with their input data. The prospect of near-term quantum computers being capable of running {quantum machine learning} (QML) algorithms has therefore generated intense interest in their adversarial vulnerability. Here we show that quantum properties of QML algorithms can confer fundamental protections against such attacks, in certain scenarios guaranteeing robustness against classically-armed adversaries. We leverage tools from many-body physics to identify the quantum sources of this protection. Our results offer a theoretical underpinning of recent evidence which suggest quantum advantages in the search for adversarial robustness. In particular, we prove that quantum classifiers are: (i) protected against weak perturbations of data drawn from the trained distribution, (ii) protected against local attacks if they are insufficiently scrambling, and (iii) protected against universal adversarial attacks if they are sufficiently quantum chaotic. Our analytic results are supported by numerical evidence demonstrating the applicability of our theorems and the resulting robustness of a quantum classifier in practice. This line of inquiry constitutes a concrete pathway to advantage in QML, orthogonal to the usually sought improvements in model speed or accuracy.

Quantum Physics,Statistical Mechanics,Machine Learning,Chaotic Dynamics
Experimental quantum adversarial learning with programmable superconducting qubits

Wenhui Ren,Weikang Li,Shibo Xu,Ke Wang,Wenjie Jiang,Feitong Jin,Xuhao Zhu,Jiachen Chen,Zixuan Song,Pengfei Zhang,Hang Dong,Xu Zhang,Jinfeng Deng,Yu Gao,Chuanyu Zhang,Yaozu Wu,Bing Zhang,Qiujiang Guo,Hekang Li,Zhen Wang,Jacob Biamonte,Chao Song,Dong-Ling Deng,H. Wang

DOI: https://doi.org/10.1038/s43588-022-00351-9

2022-04-05

Abstract:Quantum computing promises to enhance machine learning and artificial intelligence. Different quantum algorithms have been proposed to improve a wide spectrum of machine learning tasks. Yet, recent theoretical works show that, similar to traditional classifiers based on deep classical neural networks, quantum classifiers would suffer from the vulnerability problem: adding tiny carefully-crafted perturbations to the legitimate original data samples would facilitate incorrect predictions at a notably high confidence level. This will pose serious problems for future quantum machine learning applications in safety and security-critical scenarios. Here, we report the first experimental demonstration of quantum adversarial learning with programmable superconducting qubits. We train quantum classifiers, which are built upon variational quantum circuits consisting of ten transmon qubits featuring average lifetimes of 150 $\mu$s, and average fidelities of simultaneous single- and two-qubit gates above 99.94% and 99.4% respectively, with both real-life images (e.g., medical magnetic resonance imaging scans) and quantum data. We demonstrate that these well-trained classifiers (with testing accuracy up to 99%) can be practically deceived by small adversarial perturbations, whereas an adversarial training process would significantly enhance their robustness to such perturbations. Our results reveal experimentally a crucial vulnerability aspect of quantum learning systems under adversarial scenarios and demonstrate an effective defense strategy against adversarial attacks, which provide a valuable guide for quantum artificial intelligence applications with both near-term and future quantum devices.

Quantum Physics,Disordered Systems and Neural Networks,Artificial Intelligence,Machine Learning
Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise

Jhih-Cing Huang,Yu-Lin Tsai,Chao-Han Huck Yang,Cheng-Fang Su,Chia-Mu Yu,Pin-Yu Chen,Sy-Yen Kuo

DOI: https://doi.org/10.48550/arXiv.2211.00887

2023-04-28

Abstract:Recently, quantum classifiers have been found to be vulnerable to adversarial attacks, in which quantum classifiers are deceived by imperceptible noises, leading to misclassification. In this paper, we propose the first theoretical study demonstrating that adding quantum random rotation noise can improve robustness in quantum classifiers against adversarial attacks. We link the definition of differential privacy and show that the quantum classifier trained with the natural presence of additive noise is differentially private. Finally, we derive a certified robustness bound to enable quantum classifiers to defend against adversarial examples, supported by experimental results simulated with noises from IBM's 7-qubits device.

Quantum Physics,Machine Learning,Neural and Evolutionary Computing,Signal Processing
Adversarial Learning in Quantum Artificial Intelligence

Shen Pei-Xin,Jiang Wen-Jie,Li Wei-Kang,Lu Zhi-De,Deng Dong-Ling

DOI: https://doi.org/10.7498/aps.70.20210789

IF: 0.906

2021-01-01

Acta Physica Sinica

Abstract:Quantum artificial intelligence exploits the interplay between artificial intelligence and quantum physics: on the one hand, a plethora of tools and ideas from artificial intelligence can be adopted to tackle intricate quantum problems; on the other hand, quantum computing could also bring unprecedented opportunities to enhance, speed up, or innovate artificial intelligence. Yet, quantum learning systems, similar to classical ones, may also suffer adversarial attacks: adding a tiny carefully-crafted perturbation to the legitimate input data would cause the systems to make incorrect predictions at a notably high confidence level. In this paper, we introduce the basic concepts and ideas of classical and quantum adversarial learning, as well as some recent advances along this line. First, we introduce the basics of both classical and quantum adversarial learning. Through concrete examples, involving classifications of phases of two-dimensional Ising model and three-dimensional chiral topological insulators, we reveal the vulnerability of classical machine learning phases of matter. In addition, we demonstrate the vulnerability of quantum classifiers with the example of classifying hand-written digit images. We theoretically elucidate the celebrated no free lunch theorem from the classical and quantum perspectives, and discuss the universality properties of adversarial attacks in quantum classifiers. Finally, we discuss the possible defense strategies. The study of adversarial learning in quantum artificial intelligence uncovers notable potential risks for quantum intelligence systems, which would have far-reaching consequences for the future interactions between the two areas.
Quantum Adversarial Learning for Kernel Methods

Giuseppe Montalbano,Leonardo Banchi

2024-04-09

Abstract:We show that hybrid quantum classifiers based on quantum kernel methods and support vector machines are vulnerable against adversarial attacks, namely small engineered perturbations of the input data can deceive the classifier into predicting the wrong result. Nonetheless, we also show that simple defence strategies based on data augmentation with a few crafted perturbations can make the classifier robust against new attacks. Our results find applications in security-critical learning problems and in mitigating the effect of some forms of quantum noise, since the attacker can also be understood as part of the surrounding environment.

Quantum Physics,Cryptography and Security,Machine Learning
Quantum Adversarial Machine Learning

Sirui Lu,Lu-Ming Duan,Dong-Ling Deng

DOI: https://doi.org/10.1103/PhysRevResearch.2.033212

2020-01-01

Abstract:Adversarial machine learning is an emerging field that focuses on studying vulnerabilities of machine learning approaches in adversarial settings and developing techniques accordingly to make learning robust to adversarial manipulations. It plays a vital role in various machine learning applications and has attracted tremendous attention across different communities recently. In this paper, we explore different adversarial scenarios in the context of quantum machine learning. We find that, similar to traditional classifiers based on classical neural networks, quantum learning systems are likewise vulnerable to crafted adversarial examples, independent of whether the input data is classical or quantum. In particular, we find that a quantum classifier that achieves nearly the state-of-the-art accuracy can be conclusively deceived by adversarial examples obtained via adding imperceptible perturbations to the original legitimate samples. This is explicitly demonstrated with quantum adversarial learning in different scenarios, including classifying real-life images (e.g., handwritten digit images in the dataset MNIST), learning phases of matter (such as, ferromagnetic/paramagnetic orders and symmetry protected topological phases), and classifying quantum data. Furthermore, we show that based on the information of the adversarial examples at hand, practical defense strategies can be designed to fight against a number of different attacks. Our results uncover the notable vulnerability of quantum machine learning systems to adversarial perturbations, which not only reveals a novel perspective in bridging machine learning and quantum physics in theory but also provides valuable guidance for practical applications of quantum classifiers based on both near-term and future quantum technologies.

Quantum Physics,Disordered Systems and Neural Networks,Strongly Correlated Electrons,Computer Vision and Pattern Recognition
Quantum Ensemble Learning with a Programmable Superconducting Processor

Chao Song,Jiachen Chen,Yaozu Wu,Zhen Yang,Shibo Xu,Xuan Ye,Ke Wang,Chuanyu Zhang,Feitong Jin,Xuhao Zhu,Yu Gao,Ziqi Tan,Zhengyi Cui,Aosai Zhang,Ning Wang,Yiren Zou,Tingting Li,Fanhao Shen,Jiarun Zhong,Zehang Bao,Zitian Zhu,Zixuan Song,Jinfeng Deng,Hang Dong,Pengfei Zhang,Daili Li,Wei Zhang,Hekang Li,Qiujiang Guo,Zhen Wang,Ying Li,Xiaoting Wang,H. Wang

DOI: https://doi.org/10.21203/rs.3.rs-5289422/v1

2024-01-01

Abstract:Quantum machine learning is among the most exciting potential applications of quantum computing. However, the vulnerability of quantum information to environmental noises and the consequent high cost for realizing fault tolerance has impeded the quantum models from learning complex datasets. Here, we introduce Adaboost.Q, a quantum adaptation of the classical adaptive boosting (Adaboost) algorithm designed to enhance learning capabilities of quantum classifiers. Based on the probabilistic nature of quantum measurement, the algorithm improves the prediction accuracy by refining the attention mechanism during the adaptive training and combination of quantum classifiers. We experimentally demonstrate the versatility of our approach on a programmable superconducting processor, where we observe notable performance enhancements across various quantum machine learning models, including quantum neural networks and quantum convolutional neural networks. With Adaboost.Q, we achieve an accuracy above 86% for a ten-class classification task over 10,000 test samples, and an accuracy of 100% for a quantum feature recognition task over 1,564 test samples. Our results demonstrate a foundational tool for advancing quantum machine learning towards practical applications, which has broad applicability to both the current noisy and the future fault-tolerant quantum devices.
Universal Adversarial Examples and Perturbations for Quantum Classifiers

Weiyuan Gong,Dong-Ling Deng

DOI: https://doi.org/10.1093/nsr/nwab130

IF: 20.6

2021-07-22

National Science Review

Abstract:Abstract Quantum machine learning explores the interplay between machine learning and quantum physics, which may lead to unprecedented perspectives for both fields. In fact, recent works have shown strong evidences that quantum computers could outperform classical computers in solving certain notable machine learning tasks. Yet, quantum learning systems may also suffer from the vulnerability problem: adding a tiny carefully-crafted perturbation to the legitimate input data would cause the systems to make incorrect predictions at a notably high confidence level. In this paper, we study the universality of adversarial examples and perturbations for quantum classifiers. Through concrete examples involving classifications of real-life images and quantum phases of matter, we show that there exist universal adversarial examples that can fool a set of different quantum classifiers. We prove that for a set of k classifiers with each receiving input data of n qubits, an $O(\frac{\ln k}{2^n})$ increase of the perturbation strength is enough to ensure a moderate universal adversarial risk. In addition, for a given quantum classifier we show that there exist universal adversarial perturbations, which can be added to different legitimate samples and make them to be adversarial examples for the classifier. Our results reveal the universality perspective of adversarial attacks for quantum machine learning systems, which would be crucial for practical applications of both near-term and future quantum technologies in solving machine learning problems.

multidisciplinary sciences
Optimal provable robustness of quantum classification via quantum hypothesis testing

Maurice Weber,Nana Liu,Bo Li,Ce Zhang,Zhikuan Zhao

DOI: https://doi.org/10.1038/s41534-021-00410-5

IF: 10.758

2021-05-21

npj Quantum Information

Abstract:Abstract Quantum machine learning models have the potential to offer speedups and better predictive accuracy compared to their classical counterparts. However, these quantum algorithms, like their classical counterparts, have been shown to also be vulnerable to input perturbations, in particular for classification problems. These can arise either from noisy implementations or, as a worst-case type of noise, adversarial attacks. In order to develop defense mechanisms and to better understand the reliability of these algorithms, it is crucial to understand their robustness properties in the presence of natural noise sources or adversarial manipulation. From the observation that measurements involved in quantum classification algorithms are naturally probabilistic, we uncover and formalize a fundamental link between binary quantum hypothesis testing and provably robust quantum classification. This link leads to a tight robustness condition that puts constraints on the amount of noise a classifier can tolerate, independent of whether the noise source is natural or adversarial. Based on this result, we develop practical protocols to optimally certify robustness. Finally, since this is a robustness condition against worst-case types of noise, our result naturally extends to scenarios where the noise source is known. Thus, we also provide a framework to study the reliability of quantum classification protocols beyond the adversarial, worst-case noise scenarios.

physics, condensed matter, applied, atomic, molecular & chemical,quantum science & technology
RobQuNNs: A Methodology for Robust Quanvolutional Neural Networks against Adversarial Attacks

Walid El Maouaki,Alberto Marchisio,Taoufik Said,Muhammad Shafique,Mohamed Bennai

2024-07-04

Abstract:Recent advancements in quantum computing have led to the emergence of hybrid quantum neural networks, such as Quanvolutional Neural Networks (QuNNs), which integrate quantum and classical layers. While the susceptibility of classical neural networks to adversarial attacks is well-documented, the impact on QuNNs remains less understood. This study introduces RobQuNN, a new methodology to enhance the robustness of QuNNs against adversarial attacks, utilizing quantum circuit expressibility and entanglement capability alongside different adversarial strategies. Additionally, the study investigates the transferability of adversarial examples between classical and quantum models using RobQuNN, enhancing our understanding of cross-model vulnerabilities and pointing to new directions in quantum cybersecurity. The findings reveal that QuNNs exhibit up to 60\% higher robustness compared to classical networks for the MNIST dataset, particularly at low levels of perturbation. This underscores the potential of quantum approaches in improving security defenses. In addition, RobQuNN revealed that QuNN does not exhibit enhanced resistance or susceptibility to cross-model adversarial examples regardless of the quantum circuit architecture.

Quantum Physics
Towards quantum enhanced adversarial robustness in machine learning

Maxwell T. West,Shu-Lok Tsang,Jia S. Low,Charles D. Hill,Christopher Leckie,Lloyd C.L. Hollenberg,Sarah M. Erfani,Muhammad Usman

DOI: https://doi.org/10.1038/s42256-023-00661-1

2023-06-22

Abstract:Machine learning algorithms are powerful tools for data driven tasks such as image classification and feature detection, however their vulnerability to adversarial examples - input samples manipulated to fool the algorithm - remains a serious challenge. The integration of machine learning with quantum computing has the potential to yield tools offering not only better accuracy and computational efficiency, but also superior robustness against adversarial attacks. Indeed, recent work has employed quantum mechanical phenomena to defend against adversarial attacks, spurring the rapid development of the field of quantum adversarial machine learning (QAML) and potentially yielding a new source of quantum advantage. Despite promising early results, there remain challenges towards building robust real-world QAML tools. In this review we discuss recent progress in QAML and identify key challenges. We also suggest future research directions which could determine the route to practicality for QAML approaches as quantum computing hardware scales up and noise levels are reduced.

Quantum Physics,Artificial Intelligence,Emerging Technologies,Machine Learning
Quantum Neural Networks under Depolarization Noise: Exploring White-Box Attacks and Defenses

David Winderl,Nicola Franco,Jeanette Miriam Lorenz

2023-12-21

Abstract:Leveraging the unique properties of quantum mechanics, Quantum Machine Learning (QML) promises computational breakthroughs and enriched perspectives where traditional systems reach their boundaries. However, similarly to classical machine learning, QML is not immune to adversarial attacks. Quantum adversarial machine learning has become instrumental in highlighting the weak points of QML models when faced with adversarial crafted feature vectors. Diving deep into this domain, our exploration shines light on the interplay between depolarization noise and adversarial robustness. While previous results enhanced robustness from adversarial threats through depolarization noise, our findings paint a different picture. Interestingly, adding depolarization noise discontinued the effect of providing further robustness for a multi-class classification scenario. Consolidating our findings, we conducted experiments with a multi-class classifier adversarially trained on gate-based quantum simulators, further elucidating this unexpected behavior.

Quantum Physics,Artificial Intelligence
Enhancing Quantum Adversarial Robustness by Randomized Encodings

Weiyuan Gong,Dong Yuan,Weikang Li,Dong-Ling Deng

DOI: https://doi.org/10.1103/physrevresearch.6.023020

2024-01-01

Physical Review Research

Abstract:The interplay between quantum physics and machine learning gives rise to the emergent frontier of quantum machine learning, where advanced quantum learning models may outperform their classical counterparts in solving certain challenging problems. However, quantum learning systems are vulnerable to adversarial attacks: adding tiny carefully crafted perturbations on legitimate input samples can cause misclassifications. To address this problem, we propose an effective approach to protect quantum learning systems from adversarial attacks by randomly encoding the legitimate data samples through unitary or quantum error correction encoders that are unknown to the attackers. In particular, we rigorously prove that both global and local random unitary encoders lead to exponentially vanishing gradients (i.e., barren plateaus) for any variational quantum circuits that aim to add adversarial perturbations, independent of the input data and the inner structures of adversarial circuits and quantum classifiers. In addition, we prove a rigorous bound on the vulnerability of quantum classifiers under local unitary adversarial attacks. We show that random black-box quantum error correction encoders can protect quantum classifiers against local adversarial noises and their robustness increases as we concatenate error correction codes. To quantify the robustness enhancement, we adapt quantum differential privacy as a measure of the prediction stability for quantum classifiers. Our results establish versatile defense strategies for quantum classifiers against adversarial perturbations, which provide valuable guidance to enhance the reliability and security for both near-term and future quantum learning technologies.
Robustness Verification of Quantum Classifiers

Ji Guan,Wang Fang,Mingsheng Ying

DOI: https://doi.org/10.1007/978-3-030-81685-8_7

2021-01-01

Abstract:Abstract Several important models of machine learning algorithms have been successfully generalized to the quantum world, with potential speedup to training classical classifiers and applications to data analytics in quantum physics that can be implemented on the near future quantum computers. However, quantum noise is a major obstacle to the practical implementation of quantum machine learning. In this work, we define a formal framework for the robustness verification and analysis of quantum machine learning algorithms against noises. A robust bound is derived and an algorithm is developed to check whether or not a quantum machine learning algorithm is robust with respect to quantum training data. In particular, this algorithm can find adversarial examples during checking. Our approach is implemented on Google’s TensorFlow Quantum and can verify the robustness of quantum machine learning algorithms with respect to a small disturbance of noises, derived from the surrounding environment. The effectiveness of our robust bound and algorithm is confirmed by the experimental results, including quantum bits classification as the “Hello World” example, quantum phase recognition and cluster excitation detection from real world intractable physical problems, and the classification of MNIST from the classical world.
Quantum noise protects quantum classifiers against adversaries

Yuxuan Du,Min-Hsiu Hsieh,Tongliang Liu,Dacheng Tao,Nana Liu

DOI: https://doi.org/10.1103/PhysRevResearch.3.023153

2021-05-28

Physical Review Research

Abstract:Noise in quantum information processing is often viewed as a disruptive and difficult-to-avoid feature, especially in near-term quantum technologies. However, noise has often played beneficial roles, from enhancing weak signals in stochastic resonance to protecting the privacy of data in differential privacy. It is then natural to ask: Can we harness the power of quantum noise that is beneficial to quantum computing? An important current direction for quantum computing is its application to machine learning, such as classification problems. One outstanding problem in machine learning for classification is its sensitivity to adversarial examples. These are small, undetectable perturbations from the original data where the perturbed data is completely misclassified in otherwise extremely accurate classifiers. They can also be considered as worst-case perturbations by unknown noise sources. We show that by taking advantage of depolarization noise in quantum circuits for classification, a robustness bound against adversaries can be derived where the robustness improves with increasing noise. This robustness property is intimately connected with an important security concept called differential privacy, which can be extended to quantum differential privacy. For the protection of quantum data, this quantum protocol can be used against the most general adversaries. Furthermore, we show how the robustness in the classical case can be sensitive to the details of the classification model, but in the quantum case the details of the classification model are absent, thus also providing a potential quantum advantage for classical data. This opens the opportunity to explore other ways in which quantum noise can be used in our favor, as well as identifying other ways quantum algorithms can be helpful in a way which is distinct from quantum speedups. https://doi.org/10.1103/PhysRevResearch.3.023153 Published by the American Physical Society under the terms of the Creative Commons Attribution 4.0 International license. Further distribution of this work must maintain attribution to the author(s) and the published article's title, journal citation, and DOI. Published by the American Physical Society
AdvQuNN: A Methodology for Analyzing the Adversarial Robustness of Quanvolutional Neural Networks

Walid El Maouaki,Alberto Marchisio,Taoufik Said,Mohamed Bennai,Muhammad Shafique

2024-06-22

Abstract:Recent advancements in quantum computing have led to the development of hybrid quantum neural networks (HQNNs) that employ a mixed set of quantum layers and classical layers, such as Quanvolutional Neural Networks (QuNNs). While several works have shown security threats of classical neural networks, such as adversarial attacks, their impact on QuNNs is still relatively unexplored. This work tackles this problem by designing AdvQuNN, a specialized methodology to investigate the robustness of HQNNs like QuNNs against adversarial attacks. It employs different types of Ansatzes as parametrized quantum circuits and different types of adversarial attacks. This study aims to rigorously assess the influence of quantum circuit architecture on the resilience of QuNN models, which opens up new pathways for enhancing the robustness of QuNNs and advancing the field of quantum cybersecurity. Our results show that, compared to classical convolutional networks, QuNNs achieve up to 60\% higher robustness for the MNIST and 40\% for FMNIST datasets.

Quantum Physics
Adversarial Quantum Machine Learning: An Information-Theoretic Generalization Analysis

Petros Georgiou,Sharu Theresa Jose,Osvaldo Simeone

2024-02-15

Abstract:In a manner analogous to their classical counterparts, quantum classifiers are vulnerable to adversarial attacks that perturb their inputs. A promising countermeasure is to train the quantum classifier by adopting an attack-aware, or adversarial, loss function. This paper studies the generalization properties of quantum classifiers that are adversarially trained against bounded-norm white-box attacks. Specifically, a quantum adversary maximizes the classifier's loss by transforming an input state $\rho(x)$ into a state $\lambda$ that is $\epsilon$-close to the original state $\rho(x)$ in $p$-Schatten distance. Under suitable assumptions on the quantum embedding $\rho(x)$, we derive novel information-theoretic upper bounds on the generalization error of adversarially trained quantum classifiers for $p = 1$ and $p = \infty$. The derived upper bounds consist of two terms: the first is an exponential function of the 2-Rényi mutual information between classical data and quantum embedding, while the second term scales linearly with the adversarial perturbation size $\epsilon$. Both terms are shown to decrease as $1/\sqrt{T}$ over the training set size $T$ . An extension is also considered in which the adversary assumed during training has different parameters $p$ and $\epsilon$ as compared to the adversary affecting the test inputs. Finally, we validate our theoretical findings with numerical experiments for a synthetic setting.

Quantum Physics,Emerging Technologies,Machine Learning
A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Models

Maximilian Wendlinger,Kilian Tscharke,Pascal Debus

2024-04-25

Abstract:Quantum machine learning (QML) continues to be an area of tremendous interest from research and industry. While QML models have been shown to be vulnerable to adversarial attacks much in the same manner as classical machine learning models, it is still largely unknown how to compare adversarial attacks on quantum versus classical models. In this paper, we show how to systematically investigate the similarities and differences in adversarial robustness of classical and quantum models using transfer attacks, perturbation patterns and Lipschitz bounds. More specifically, we focus on classification tasks on a handcrafted dataset that allows quantitative analysis for feature attribution. This enables us to get insight, both theoretically and experimentally, on the robustness of classification networks. We start by comparing typical QML model architectures such as amplitude and re-upload encoding circuits with variational parameters to a classical ConvNet architecture. Next, we introduce a classical approximation of QML circuits (originally obtained with Random Fourier Features sampling but adapted in this work to fit a trainable encoding) and evaluate this model, denoted Fourier network, in comparison to other architectures. Our findings show that this Fourier network can be seen as a "middle ground" on the quantum-classical boundary. While adversarial attacks successfully transfer across this boundary in both directions, we also show that regularization helps quantum networks to be more robust, which has direct impact on Lipschitz bounds and transfer attacks.

Machine Learning,Cryptography and Security,Quantum Physics
Universal adversarial perturbations for multiple classification tasks with quantum classifiers

Yun-Zhong Qiu

DOI: https://doi.org/10.1088/2632-2153/acffa3

2023-10-25

Abstract:Quantum adversarial machine learning is an emerging field that studies the vulnerability of quantum learning systems against adversarial perturbations and develops possible defense strategies. Quantum universal adversarial perturbations are small perturbations, which can make different input samples into adversarial examples that may deceive a given quantum classifier. This is a field that was rarely looked into but worthwhile investigating because universal perturbations might simplify malicious attacks to a large extent, causing unexpected devastation to quantum machine learning models. In this paper, we take a step forward and explore the quantum universal perturbations in the context of heterogeneous classification tasks. In particular, we find that quantum classifiers that achieve almost state-of-the-art accuracy on two different classification tasks can be both conclusively deceived by one carefully-crafted universal perturbation. This result is explicitly demonstrated with well-designed quantum continual learning models with elastic weight consolidation method to avoid catastrophic forgetting, as well as real-life heterogeneous datasets from hand-written digits and medical MRI images. Our results provide a simple and efficient way to generate universal perturbations on heterogeneous classification tasks and thus would provide valuable guidance for future quantum learning technologies.

Quantum Physics,Cryptography and Security,Machine Learning
Certifiably Robust Encoding Schemes

Aman Saxena,Tom Wollschläger,Nicola Franco,Jeanette Miriam Lorenz,Stephan Günnemann

2024-08-02

Abstract:Quantum machine learning uses principles from quantum mechanics to process data, offering potential advances in speed and performance. However, previous work has shown that these models are susceptible to attacks that manipulate input data or exploit noise in quantum circuits. Following this, various studies have explored the robustness of these models. These works focus on the robustness certification of manipulations of the quantum states. We extend this line of research by investigating the robustness against perturbations in the classical data for a general class of data encoding schemes. We show that for such schemes, the addition of suitable noise channels is equivalent to evaluating the mean value of the noiseless classifier at the smoothed data, akin to Randomized Smoothing from classical machine learning. Using our general framework, we show that suitable additions of phase-damping noise channels improve empirical and provable robustness for the considered class of encoding schemes.

Quantum Physics,Machine Learning

Robust quantum classifiers via NISQ adversarial learning

Adversarial Robustness Guarantees for Quantum Classifiers

Experimental quantum adversarial learning with programmable superconducting qubits

Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise

Adversarial Learning in Quantum Artificial Intelligence

Quantum Adversarial Learning for Kernel Methods

Quantum Adversarial Machine Learning

Quantum Ensemble Learning with a Programmable Superconducting Processor

Universal Adversarial Examples and Perturbations for Quantum Classifiers

Optimal provable robustness of quantum classification via quantum hypothesis testing

RobQuNNs: A Methodology for Robust Quanvolutional Neural Networks against Adversarial Attacks

Towards quantum enhanced adversarial robustness in machine learning

Quantum Neural Networks under Depolarization Noise: Exploring White-Box Attacks and Defenses

Enhancing Quantum Adversarial Robustness by Randomized Encodings

Robustness Verification of Quantum Classifiers

Quantum noise protects quantum classifiers against adversaries

AdvQuNN: A Methodology for Analyzing the Adversarial Robustness of Quanvolutional Neural Networks

Adversarial Quantum Machine Learning: An Information-Theoretic Generalization Analysis

A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Models

Universal adversarial perturbations for multiple classification tasks with quantum classifiers

Certifiably Robust Encoding Schemes