Quantum computing offers significant acceleration capabilities over its classical counterpart in various application domains. Consequently, there has been substantial focus on improving quantum computing capabilities. However, to date, the security implications of these quantum computing platforms have been largely overlooked. With the emergence of cloud-based quantum computing services, it is critical to investigate the extension of classical computer security threats to the realm of quantum computing. In this study, we investigated timing-based side-channel vulnerabilities within IBM's cloud-based quantum service. The proposed attack effectively subverts the confidentiality of the executed quantum algorithm, using a more realistic threat model compared to existing approaches. Our experimental results, conducted using IBM's quantum cloud service, demonstrate that with just 10 measurements, it is possible to identify the underlying quantum computer that executed the circuit. Moreover, when evaluated using the popular Grover circuit, we showcase the ability to leak the quantum oracle with a mere 500 measurements. These findings underline the pressing need to address timing-based vulnerabilities in quantum computing platforms and advocate for enhanced security measures to safeguard sensitive quantum algorithms and data.
Quantum computing offers significant acceleration capabilities over its classical counterpart in various application domains. Consequently, there has been substantial focus on improving quantum computing capabilities. However, to date, the security implications of these quantum computing platforms have been largely overlooked. With the emergence of cloud-based quantum computing services, it is critical to investigate the extension of classical computer security threats to the realm of quantum computing. In this study, we investigated timing-based side-channel vulnerabilities within IBM's cloud-based quantum service. The proposed attack effectively subverts the confidentiality of the executed quantum algorithm, using a more realistic threat model compared to existing approaches. Our experimental results, conducted using IBM's quantum cloud service, demonstrate that with just 10 measurements, it is possible to identify the underlying quantum computer that executed the circuit. Moreover, when evaluated using the popular Grover circuit, we showcase the ability to leak the quantum oracle with a mere 500 measurements. These findings underline the pressing need to address timing-based vulnerabilities in quantum computing platforms and advocate for enhanced security measures to safeguard sensitive quantum algorithms and data.
Quantum computing is becoming increasingly widespread due to the potential and capabilities to solve complex problems beyond the scope of classical computers. As Quantum Cloud services are adopted by businesses and research groups, they allow for greater progress and application in many fields. However, the inherent vulnerabilities of these environments pose significant security concerns. This survey delivers a comprehensive analysis of the security challenges that emerged in quantum cloud systems, with a distinct focus on multi-tenant vulnerabilities and the classical-quantum interface. Key threats such as crosstalk attacks, quantum-specific side-channel vulnerabilities, and insider threats are all examined, as well as their effects on the confidentiality, integrity, and availability of quantum circuits. The design and implementation of various quantum architectures from quantum cloud providers are also discussed. In addition, this paper delves into emerging quantum security solutions and best practices to mitigate these risks. This survey offers insights into current research gaps and proposes future directions for secure and resilient quantum cloud infrastructures.
Quantum computers have garnered significant attention recently, owing to their potential to surpass the computational capabilities of classical systems. However, stringent operational requirements render quantum computing devices inherently costly. To democratize access to quantum computers, efforts have been made to make these devices accessible via cloud platforms. This has led to multiple users gaining access to the same quantum computers sequentially through cloud-based interfaces. However, quantum computers today are susceptible to noise, which causes computational errors. Compounded with widespread user access, this susceptibility opens avenues for side-channel threats within quantum computing systems, where malicious users may exploit these vulnerabilities to intercept and potentially exfiltrate sensitive information. Given the wide-ranging applicability of quantum computing across various domains, the ramifications of confidential information leakage can be detrimental. In this paper, we undertake a comprehensive exploration of existing side-channel attack vectors targeting quantum computing systems, along with an analysis of their implications aiming to facilitate the development of secure and accessible quantum computing systems.
The emergence of quantum computing represents one of the most significant paradigm shifts in the history of computation, with profound implications for offensive security and cyber warfare. This comprehensive research paper presents a systematic analysis of quantum-enabled offensive capabilities, novel attack vectors targeting quantum systems themselves, and the evolving threat landscape at the intersection of quantum computing and artificial intelligence. We introduce the Q-THREAT Framework, a novel temporal risk assessment model that quantifies the "Harvest Now, Decrypt Later" threat across different data confidentiality lifetimes and sectoral exposures. This research synthesizes and categorizes recently documented attack vectors including quantum Rowhammer exploits, timing-based side-channel vulnerabilities in cloud quantum services, and multi-tenant quantum system intrusions. Recent research demonstrates that current quantum cloud platforms from major providers including IBM, Rigetti, and others exhibit significant security vulnerabilities that could be exploited by adversaries to compromise computational integrity, extract sensitive circuit information, and disrupt quantum computations. Furthermore, we analyze the convergence of quantum computing and artificial intelligence as a force multiplier for offensive cyber operations. We present evidence that quantum machine learning algorithms can demonstrate competitive or superior performance in certain cybersecurity applications compared to classical approaches in controlled experimental settings, with recent studies reporting high accuracies in tasks such as malware detection and intrusion detection on benchmark datasets. Our analysis of nation-state quantum programs reveals an accelerating global quantum arms race with significant implications for national security. Based on our findings, we propose a comprehensive defensive framework incorporating post-quantum cryptographic standards, crypto-agility principles, and quantum-safe architectural patterns. This research contributes to the nascent field of quantum cybersecurity by establishing foundational threat models, identifying critical research gaps, and providing actionable recommendations for organizations preparing for the quantum era.
The rapid advancement of quantum computing has spurred widespread adoption, with cloud-based quantum devices gaining traction in academia and industry. This shift raises critical concerns about the privacy and security of computations on shared, multi-tenant quantum platforms accessed remotely. Recent studies have shown that crosstalk on shared quantum devices allows adversaries to interfere with victim circuits within a neighborhood. While insightful, these works left unresolved questions regarding the root cause of crosstalk, effective countermeasures, and replicability across circuits. We revisit the crosstalk effect, tracing its origins to the SWAP path between qubits and demonstrating its impact even over long distances. Our results significantly improve the understanding of this phenomenon beyond prior works. The proposed SWAP-based side-channel attack operates in both active and passive modes, as verified on real IBM quantum devices. In the active attack, an attacker executing a single CNOT gate can perturb victim circuits running Grover's Algorithm, reducing expected output accuracy by 81.62% through strategic qubit placement. Moreover, this effect can be modeled to identify qubits more susceptible to attack. The passive attack, leveraging a stealthy circuit as small as 6.25% of the victim's, achieves 100% accuracy in predicting the victim's circuit size when running Simon's Algorithm. These findings challenge the existing defense strategy of maximizing topological distance between circuits, showing that attackers can still extract sensitive information or manipulate results remotely. Our work highlights the urgent need for robust security measures to safeguard quantum computations against emerging threats.
The rapidly growing interest in quantum computing also increases the importance of securing these computers from various physical attacks. Constantly increasing qubit counts and improvements to the fidelity of the quantum computers hold great promise for the ability of these computers to run novel algorithms with highly sensitive intellectual property. However, in today's cloud-based quantum computer setting, users lack physical control over the computers. Physical attacks, such as those perpetrated by malicious insiders in data centers, could be used to extract sensitive information about the circuits being executed on these computers. This work shows the first exploration and study of power-based side-channel attacks in quantum computers. The explored attacks could be used to recover information about the control pulses sent to these computers. By analyzing these control pulses, attackers can reverse-engineer the equivalent gate-level description of the circuits, and the algorithms being run, or data hard-coded into the circuits. This work introduces five new types of attacks, and evaluates them using control pulse information available from cloud-based quantum computers. This work demonstrates how and what circuits could be recovered, and then in turn how to defend from the newly demonstrated side-channel attacks on quantum computing systems.
With the rapidly growing interest in quantum computing also grows the importance of securing these quantum computers from various physical attacks. Constantly increasing qubit counts and improvements to the fidelity of the quantum computers hold great promise for the ability of these computers to run novel algorithms with highly sensitive intellectual property. However, in today's cloud-based quantum computer setting, users lack physical control over the computers. Physical attacks, such as those perpetrated by malicious insiders in data centers, could be used to extract sensitive information about the circuits being executed on these computers. Indeed, this work shows for the first time that power-based side-channel attacks could be deployed against quantum computers. Such attacks can be used to recover information about the control pulses sent to these computers. By analyzing these control pulses, attackers can reverse-engineer the equivalent gate-level description of the circuits, and possibly even the secret algorithms being run. This work introduces five new types of attacks, and evaluates them using control pulse information available from cloud-based quantum computers. This work demonstrates how and what circuits could be recovered, and then in turn how to defend from the newly demonstrated side-channel attacks on quantum~computers.