Towards quantum enhanced adversarial robustness in machine learning
Not on the map. Why?
Abstract (arXiv)
Machine learning algorithms are powerful tools for data driven tasks such as image classification and feature detection, however their vulnerability to adversarial examples - input samples manipulated to fool the algorithm - remains a serious challenge. The integration of machine learning with quantum computing has the potential to yield tools offering not only better accuracy and computational efficiency, but also superior robustness against adversarial attacks. Indeed, recent work has employed quantum mechanical phenomena to defend against adversarial attacks, spurring the rapid development of the field of quantum adversarial machine learning (QAML) and potentially yielding a new source of quantum advantage. Despite promising early results, there remain challenges towards building robust real-world QAML tools. In this review we discuss recent progress in QAML and identify key challenges. We also suggest future research directions which could determine the route to practicality for QAML approaches as quantum computing hardware scales up and noise levels are reduced.
Key facts. Cited by 28 papers in the map (data through 14 Oct 2026). Builds on 55 of its 98 references that are in the map. First posted on arXiv 22 Jun 2023.
Builds on
55 of 98 references.
References · 55
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022Generative Adversarial Networkscited by 5,627
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Adversarial examples in the physical worldcited by 1,769
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2016Adversarial Machine Learning at Scalecited by 936
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
38 more
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2018Supervised learning with quantum enhanced feature spacescited by 665
- 2018Barren plateaus in quantum neural network training landscapescited by 630
- 2017Generative Adversarial Networks: An Overviewcited by 590
- 2017One pixel attack for fooling deep neural networkscited by 582
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
- 2017Countering Adversarial Images using Input Transformationscited by 520
- 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 468
- 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
- 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 330
- 2016Quantum Machine Learningcited by 326
- 2018Certified Defenses against Adversarial Examplescited by 306
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 279
- 2020A rigorous and robust quantum speed-up in supervised machine learningcited by 271
- 2016Safety Verification of Deep Neural Networkscited by 263
- 2018Generating Adversarial Examples with Adversarial Networkscited by 258
- 2017Detecting Adversarial Samples from Artifactscited by 245
- 2021Generalization in quantum machine learning from few training datacited by 216
- 2021Supervised quantum machine learning models are kernel methodscited by 200
- 2021Quantum advantage in learning from experimentscited by 188
- 2019Efficient Learning for Deep Quantum Neural Networkscited by 161
- 2018Scaling provable adversarial defensescited by 143
- 2018Quantum generative adversarial networkscited by 128
- 2020Robust data encodings for quantum classifierscited by 91
- 2021Encoding-dependent generalization bounds for parametrized quantum circuitscited by 82
- 2017Generating Adversarial Malware Examples for Black-Box Attacks Based on GANcited by 75
- 2020Verification of Deep Convolutional Neural Networks Using ImageStarscited by 75
- 2019An Abstraction-Based Framework for Neural Network Verificationcited by 68
- 2020Quantum noise protects quantum classifiers against adversariescited by 68
- 2019Quantum Adversarial Machine Learningcited by 67
- 2017APE-GAN: Adversarial Perturbation Elimination with GANcited by 57
- 2022Experimental quantum adversarial learning with programmable superconducting qubitscited by 39
- 2022Benchmarking Adversarially Robust Quantum Machine Learning at Scalecited by 29
- 2019Transfer of Adversarial Robustness Between Perturbation Typescited by 25
- 2020Optimal Provable Robustness of Quantum Classification via Quantum Hypothesis Testingcited by 25
- 2021Universal Adversarial Examples and Perturbations for Quantum Classifierscited by 23
- 2020Formal Analysis and Redesign of a Neural Network-Based Aircraft Taxiing System with VerifAIcited by 21
50 most cited of 55 All 55 (JSON)
Built on by
Citing papers per year: 2023: 4; 2024: 9; 2025: 10; 2026: 5.
28 papers.
Sort:
By area:
- 2024Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Modelscited by 38
- 2023Training robust and generalizable quantum modelscited by 21
- 2023Quantum Machine Learning on Near-Term Quantum Devices: Current State of Supervised and Unsupervised Techniques for Real-World Applicationscited by 14
- 2024A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Modelscited by 12
- 2024Quantum-Trained Convolutional Neural Network for Deepfake Audio Detectioncited by 12
- 2024Adversarial Robustness Guarantees for Quantum Classifierscited by 9
- 2025Distributionally Robust Free Energy Principle for Decision-Makingcited by 4
- 2025Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Methodcited by 3
- 2025SoK: Critical Evaluation of Quantum Machine Learning for Adversarial Robustnesscited by 3
- 2023Radio Signal Classification by Adversarially Robust Quantum Machine Learningcited by 2
- 2024A Modified Depolarization Approach for Efficient Quantum Machine Learningcited by 2
- 2024Security Concerns in Quantum Machine Learning as a Servicecited by 2
16 more
- 2024Self-Adaptive Quantum Kernel Principal Components Analysis for Compact Readout of Chemiresistive Sensor Arrayscited by 2
- 2024Quantum Kernel Learning for Small Dataset Modeling in Semiconductor Fabrication: Application to Ohmic Contactcited by 2
- 2025Adversarial Robustness of Partitioned Quantum Classifierscited by 2
- 2025Adversarial Robustness in Distributed Quantum Machine Learningcited by 2
- 2024Uncertainty-Aware Hardware Trojan Detection Using Multimodal Deep Learningcited by 1
- 2025Superior resilience to poisoning and amenability to unlearning in quantum machine learningcited by 1
- 2023Robust and Efficient Interference Neural Networks for Defending Against Adversarial Attacks in ImageNetcited by 0
- 2025Detecting underdetermination in parameterized quantum circuitscited by 0
- 2025Provably Robust Training of Quantum Circuit Classifiers Against Parameter Noisecited by 0
- 2025The interplay of robustness and generalization in quantum machine learningcited by 0
- 2025Quantum Artificial Intelligence for Secure Autonomous Vehicle Navigation: An Architectural Proposalcited by 0
- 2026QuanForge: A Mutation Testing Framework for Quantum Neural Networkscited by 0
- 2026Defending Quantum Classifiers against Adversarial Perturbations through Quantum Autoencoderscited by 0
- 2026Decoherence as Defence and the Magnitude of Noise Regularisation: A Rigorous N -Qubit Theory of Stochastic Quantum Neural Networks for Adversarially Robust Network Intrusion Detectioncited by 0
- 2026Benchmarking Quantum Machine Learning for Power-System Attack Detection: Evaluation Choices Decide the Outcome Before the Models Docited by 0
- 2026When Normalization Selects the Sign: Auditing Robustness Ablations in Quantum Attentioncited by 0
- 2026When Normalization Selects the Sign: Auditing Robustness Ablations in Quantum Attention2 Oct 2026
- 2026Benchmarking Quantum Machine Learning for Power-System Attack Detection: Evaluation Choices Decide the Outcome Before the Models Do16 Aug 2026
- 2026Decoherence as Defence and the Magnitude of Noise Regularisation: A Rigorous N -Qubit Theory of Stochastic Quantum Neural Networks for Adversarially Robust Network Intrusion Detection23 Jun 2026
- 2026Defending Quantum Classifiers against Adversarial Perturbations through Quantum Autoencoders30 Apr 2026
- 2026QuanForge: A Mutation Testing Framework for Quantum Neural Networks22 Apr 2026
- 2025SoK: Critical Evaluation of Quantum Machine Learning for Adversarial Robustness19 Nov 2025
- 2025Adversarial Robustness in Distributed Quantum Machine Learning16 Aug 2025
- 2025Superior resilience to poisoning and amenability to unlearning in quantum machine learning4 Aug 2025
- 2025Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Method7 Jul 2025
- 2025Quantum Artificial Intelligence for Secure Autonomous Vehicle Navigation: An Architectural Proposal19 Jun 2025
- 2025The interplay of robustness and generalization in quantum machine learning10 Jun 2025
- 2025Provably Robust Training of Quantum Circuit Classifiers Against Parameter Noise24 May 2025
16 more
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2025Distributionally Robust Free Energy Principle for Decision-Making17 Mar 2025
- 2025Adversarial Robustness of Partitioned Quantum Classifiers28 Jan 2025
- 2024Quantum-Trained Convolutional Neural Network for Deepfake Audio Detection11 Oct 2024
- 2024Quantum Kernel Learning for Small Dataset Modeling in Semiconductor Fabrication: Application to Ohmic Contact17 Sep 2024
- 2024Self-Adaptive Quantum Kernel Principal Components Analysis for Compact Readout of Chemiresistive Sensor Arrays28 Aug 2024
- 2024Security Concerns in Quantum Machine Learning as a Service18 Aug 2024
- 2024Adversarial Robustness Guarantees for Quantum Classifiers16 May 2024
- 2024A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Models24 Apr 2024
- 2024Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models16 Apr 2024
- 2024A Modified Depolarization Approach for Efficient Quantum Machine Learning10 Apr 2024
- 2024Uncertainty-Aware Hardware Trojan Detection Using Multimodal Deep Learning15 Jan 2024
- 2023Radio Signal Classification by Adversarially Robust Quantum Machine Learning13 Dec 2023
- 2023Training robust and generalizable quantum models20 Nov 2023
- 2023Robust and Efficient Interference Neural Networks for Defending Against Adversarial Attacks in ImageNet3 Sep 2023
- 2023Quantum Machine Learning on Near-Term Quantum Devices: Current State of Supervised and Unsupervised Techniques for Real-World Applications3 Jul 2023
- 2023Training robust and generalizable quantum modelscited by 21
- 2023Quantum Machine Learning on Near-Term Quantum Devices: Current State of Supervised and Unsupervised Techniques for Real-World Applicationscited by 14
- 2024A Comparative Analysis of Adversarial Robustness for Quantum and Classical Machine Learning Modelscited by 12
- 2024Quantum-Trained Convolutional Neural Network for Deepfake Audio Detectioncited by 12
- 2024Adversarial Robustness Guarantees for Quantum Classifierscited by 9
- 2025Distributionally Robust Free Energy Principle for Decision-Makingcited by 4
- 2025Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Methodcited by 3
- 2023Radio Signal Classification by Adversarially Robust Quantum Machine Learningcited by 2
- 2024A Modified Depolarization Approach for Efficient Quantum Machine Learningcited by 2
- 2024Security Concerns in Quantum Machine Learning as a Servicecited by 2
- 2024Self-Adaptive Quantum Kernel Principal Components Analysis for Compact Readout of Chemiresistive Sensor Arrayscited by 2
- 2024Quantum Kernel Learning for Small Dataset Modeling in Semiconductor Fabrication: Application to Ohmic Contactcited by 2
12 most cited of 25 All 25 (JSON)
- 2026When Normalization Selects the Sign: Auditing Robustness Ablations in Quantum Attention2 Oct 2026
- 2026Benchmarking Quantum Machine Learning for Power-System Attack Detection: Evaluation Choices Decide the Outcome Before the Models Do16 Aug 2026
- 2026Decoherence as Defence and the Magnitude of Noise Regularisation: A Rigorous N -Qubit Theory of Stochastic Quantum Neural Networks for Adversarially Robust Network Intrusion Detection23 Jun 2026
- 2026Defending Quantum Classifiers against Adversarial Perturbations through Quantum Autoencoders30 Apr 2026
- 2026QuanForge: A Mutation Testing Framework for Quantum Neural Networks22 Apr 2026
- 2025Adversarial Robustness in Distributed Quantum Machine Learning16 Aug 2025
- 2025Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Method7 Jul 2025
- 2025Quantum Artificial Intelligence for Secure Autonomous Vehicle Navigation: An Architectural Proposal19 Jun 2025
- 2025The interplay of robustness and generalization in quantum machine learning10 Jun 2025
- 2025Provably Robust Training of Quantum Circuit Classifiers Against Parameter Noise24 May 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2025Distributionally Robust Free Energy Principle for Decision-Making17 Mar 2025
12 newest of 25 All 25 (JSON)