Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise
Not on the map. Why?
Abstract (arXiv)
Recently, quantum classifiers have been found to be vulnerable to adversarial attacks, in which quantum classifiers are deceived by imperceptible noises, leading to misclassification. In this paper, we propose the first theoretical study demonstrating that adding quantum random rotation noise can improve robustness in quantum classifiers against adversarial attacks. We link the definition of differential privacy and show that the quantum classifier trained with the natural presence of additive noise is differentially private. Finally, we derive a certified robustness bound to enable quantum classifiers to defend against adversarial examples, supported by experimental results simulated with noises from IBM's 7-qubits device.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 14 of its 26 references that are in the map. First posted on arXiv 2 Nov 2022.
Builds on
14 of 26 references.
References · 14
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2019Parameterized quantum circuits as machine learning modelscited by 332
- 2016Quantum Machine Learningcited by 326
- 2019Efficient Learning for Deep Quantum Neural Networkscited by 161
- 2018Quantum generative adversarial networkscited by 128
- 2018Towards Quantum Machine Learning with Tensor Networkscited by 76
- 2020Quantum noise protects quantum classifiers against adversariescited by 68
- 2020Decentralizing Feature Extraction with Quantum Convolutional Neural Network for Automatic Speech Recognitioncited by 57
- 2022When BERT Meets Quantum Temporal Convolution Learning for Text Classification in Heterogeneous Computingcited by 40
- 2021Recent advances for quantum classifierscited by 35
- 2022Theoretical Error Performance Analysis for Variational Quantum Circuit Based Functional Regressioncited by 26
Built on by
Citing papers per year: 2023: 3; 2024: 7; 2025: 5; 2026: 3.
18 papers.
Sort:
- 2023Quantum Pufferfish Privacy: A Flexible Privacy Framework for Quantum Systemscited by 9
- 2023A unifying framework for differentially private quantum algorithmscited by 7
- 2024Contraction of Private Quantum Channels and Private Quantum Hypothesis Testingcited by 7
- 2023Quantum Neural Networks under Depolarization Noise: Exploring White-Box Attacks and Defensescited by 5
- 2024Generating Universal Adversarial Perturbations for Quantum Classifierscited by 5
- 2024Constructing Optimal Noise Channels for Enhanced Robustness in Quantum Machine Learningcited by 5
- 2024A Modified Depolarization Approach for Efficient Quantum Machine Learningcited by 2
- 2024Discrete Randomized Smoothing Meets Quantum Computingcited by 2
- 2025Adversarial Robustness of Partitioned Quantum Classifierscited by 2
- 2025Adversarial Robustness in Distributed Quantum Machine Learningcited by 2
- 2024Quadratic Advantage with Quantum Randomized Smoothing Applied to Time-Series Analysiscited by 1
- 2024Certifiably Robust Encoding Schemescited by 1
6 more
- 2025On the Generalization of Adversarially Trained Quantum Classifierscited by 1
- 2025Quantum Artificial Intelligence for Mission-Critical Systems: Foundations, Architectural Elements, and Future Directionscited by 1
- 2025Detecting underdetermination in parameterized quantum circuitscited by 0
- 2026QShield: Securing Neural Networks Against Adversarial Attacks using Quantum Circuitscited by 0
- 2026Representational separation between unitary and channel quantum generative models via shared classical randomness at shallow depthcited by 0
- 2026When Normalization Selects the Sign: Auditing Robustness Ablations in Quantum Attentioncited by 0
- 2026When Normalization Selects the Sign: Auditing Robustness Ablations in Quantum Attention2 Oct 2026
- 2026Representational separation between unitary and channel quantum generative models via shared classical randomness at shallow depth5 Aug 2026
- 2026QShield: Securing Neural Networks Against Adversarial Attacks using Quantum Circuits13 Apr 2026
- 2025Quantum Artificial Intelligence for Mission-Critical Systems: Foundations, Architectural Elements, and Future Directions13 Nov 2025
- 2025Adversarial Robustness in Distributed Quantum Machine Learning16 Aug 2025
- 2025On the Generalization of Adversarially Trained Quantum Classifiers24 Apr 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2025Adversarial Robustness of Partitioned Quantum Classifiers28 Jan 2025
- 2024Certifiably Robust Encoding Schemes2 Aug 2024
- 2024Discrete Randomized Smoothing Meets Quantum Computing1 Aug 2024
- 2024Quadratic Advantage with Quantum Randomized Smoothing Applied to Time-Series Analysis25 Jul 2024
- 2024Contraction of Private Quantum Channels and Private Quantum Hypothesis Testing26 Jun 2024
6 more
- 2024Constructing Optimal Noise Channels for Enhanced Robustness in Quantum Machine Learning25 Apr 2024
- 2024A Modified Depolarization Approach for Efficient Quantum Machine Learning10 Apr 2024
- 2024Generating Universal Adversarial Perturbations for Quantum Classifiers13 Feb 2024
- 2023Quantum Neural Networks under Depolarization Noise: Exploring White-Box Attacks and Defenses29 Nov 2023
- 2023A unifying framework for differentially private quantum algorithms10 Jul 2023
- 2023Quantum Pufferfish Privacy: A Flexible Privacy Framework for Quantum Systems22 Jun 2023
- 2023Quantum Pufferfish Privacy: A Flexible Privacy Framework for Quantum Systemscited by 9
- 2023A unifying framework for differentially private quantum algorithmscited by 7
- 2024Contraction of Private Quantum Channels and Private Quantum Hypothesis Testingcited by 7
- 2023Quantum Neural Networks under Depolarization Noise: Exploring White-Box Attacks and Defensescited by 5
- 2024Generating Universal Adversarial Perturbations for Quantum Classifierscited by 5
- 2024Constructing Optimal Noise Channels for Enhanced Robustness in Quantum Machine Learningcited by 5
- 2024A Modified Depolarization Approach for Efficient Quantum Machine Learningcited by 2
- 2024Discrete Randomized Smoothing Meets Quantum Computingcited by 2
- 2025Adversarial Robustness of Partitioned Quantum Classifierscited by 2
- 2025Adversarial Robustness in Distributed Quantum Machine Learningcited by 2
- 2024Quadratic Advantage with Quantum Randomized Smoothing Applied to Time-Series Analysiscited by 1
- 2024Certifiably Robust Encoding Schemescited by 1
12 most cited of 18 All 18 (JSON)
- 2026When Normalization Selects the Sign: Auditing Robustness Ablations in Quantum Attention2 Oct 2026
- 2026Representational separation between unitary and channel quantum generative models via shared classical randomness at shallow depth5 Aug 2026
- 2026QShield: Securing Neural Networks Against Adversarial Attacks using Quantum Circuits13 Apr 2026
- 2025Quantum Artificial Intelligence for Mission-Critical Systems: Foundations, Architectural Elements, and Future Directions13 Nov 2025
- 2025Adversarial Robustness in Distributed Quantum Machine Learning16 Aug 2025
- 2025On the Generalization of Adversarially Trained Quantum Classifiers24 Apr 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2025Adversarial Robustness of Partitioned Quantum Classifiers28 Jan 2025
- 2024Certifiably Robust Encoding Schemes2 Aug 2024
- 2024Discrete Randomized Smoothing Meets Quantum Computing1 Aug 2024
- 2024Quadratic Advantage with Quantum Randomized Smoothing Applied to Time-Series Analysis25 Jul 2024
- 2024Contraction of Private Quantum Channels and Private Quantum Hypothesis Testing26 Jun 2024
12 newest of 18 All 18 (JSON)