arXiv:2504.19064

Security Vulnerabilities in Quantum Cloud Systems: A Survey on Emerging Threats

Justin Coupel, Tasnuva Farheen

Published Apr 27, 2025• 1 citation

Abstract

Quantum computing is becoming increasingly widespread due to the potential and capabilities to solve complex problems beyond the scope of classical computers. As Quantum Cloud services are adopted by businesses and research groups, they allow for greater progress and application in many fields. However, the inherent vulnerabilities of these environments pose significant security concerns. This survey delivers a comprehensive analysis of the security challenges that emerged in quantum cloud systems, with a distinct focus on multi-tenant vulnerabilities and the classical-quantum interface. Key threats such as crosstalk attacks, quantum-specific side-channel vulnerabilities, and insider threats are all examined, as well as their effects on the confidentiality, integrity, and availability of quantum circuits. The design and implementation of various quantum architectures from quantum cloud providers are also discussed. In addition, this paper delves into emerging quantum security solutions and best practices to mitigate these risks. This survey offers insights into current research gaps and proposes future directions for secure and resilient quantum cloud infrastructures.

DOI: 10.48550/arxiv.2504.19064

Related papers

Post-Quantum Security in Cloud Computing: Challenges and Solutions

N. Kowsalya

The emergence of quantum computing marks a revolutionary turning point in the evolution of information technology and cybersecurity. While quantum technologies promise extraordinary computational capabilities capable of solving highly complex scientific and industrial problems, they simultaneously introduce unprecedented risks to the cryptographic foundations that secure today’s digital world. Cloud computing, which has become the backbone of modern digital infrastructure, is particularly vulnerable to these evolving threats. As organizations increasingly rely on cloud platforms for data storage, communication, financial transactions, healthcare systems, research, and critical infrastructure management, ensuring long-term cryptographic security has become an urgent global priority. This book, Post-Quantum Security in Cloud Computing: Challenges and Solutions, has been developed to provide a comprehensive exploration of the rapidly evolving intersection between quantum computing, cloud security, and post-quantum cryptography (PQC). The primary objective of this work is to present both foundational concepts and advanced research perspectives that help readers understand the implications of quantum threats on existing cloud ecosystems and the emerging solutions designed to mitigate them. The chapters in this book collectively examine the vulnerabilities of classical cryptographic systems against quantum algorithms such as Shor’s Algorithm and Grover’s Algorithm, which threaten widely deployed security mechanisms including RSA, Diffie–Hellman, and Elliptic Curve Cryptography. The book further introduces the theoretical and practical foundations of post-quantum cryptography, covering lattice-based, code-based, multivariate, and hash-based cryptographic schemes that are being developed as quantum-resistant alternatives. Beyond theoretical concepts, this book emphasizes practical implementation challenges in cloud environments, including scalability, performance overhead, key management, hybrid cryptographic architectures, secure identity infrastructures, and deployment strategies across distributed and multi-cloud systems. Special attention has also been given to experimental evaluations, benchmarking methodologies, and emerging research directions that will shape the future of quantum-safe cloud security. This work is intended for students, academic researchers, cybersecurity professionals, cloud architects, and policymakers who seek a structured and research-oriented understanding of post-quantum cloud security. By combining theoretical insights with practical perspectives, the book aims to serve as a valuable reference for understanding current developments and preparing for the transition toward quantum-resilient computing infrastructures. The successful completion of this book would not have been possible without the contributions of the global research community working tirelessly in the fields of cryptography, quantum computing, cloud security, and distributed systems. Their groundbreaking research and continuous innovation have inspired many of the ideas discussed throughout this work. It is our sincere hope that this book will contribute meaningfully to the ongoing efforts toward building secure, scalable, and future-ready cloud systems capable of withstanding the challenges of the quantum era.

May 29, 20260 citations

A Comprehensive Review of Emerging Challenges in Cloud Computing Security

Nayab Arshad

The rapid expansion of Big Data has strained classical computing systems, necessitating innovative solutions for efficient data processing. Quantum computing, leveraging principles like superposition and entanglement, presents transformative potential for addressing complex, large-scale problems that are intractable for classical methods. This review explores the role of quantum computing in Big Data processing, examining key algorithms such as Grover’s search, Shor’s factorization, and quantum machine learning techniques. It discusses foundational concepts like qubit operations, quantum complexity classes, and hybrid quantum-classical architectures, while critically assessing hardware limitations such as de-coherence and error rates in NISQ-era devices. Promising applications in optimization, secure communication, and high-dimensional data analysis are highlighted, alongside challenges in data encoding, algorithmic readiness, and practical implementation. Emerging research directions, including near-term NISQ applications, fault-tolerant quantum computing, and cross-disciplinary opportunities in NLP and IoT, are also explored. By synthesizing theoretical advances with practical constraints, this review provides a balanced perspective on quantum computing is potential to reshape Big Data analytics, emphasizing both its revolutionary capabilities and the significant barriers to widespread adoption. While quantum advantage remains limited to specific use cases today, continued progress in hardware and algorithms may redefine large-scale data processing in the future. References [1]. C. Stouffer, "23 cloud security risks, threats, and best practices," Norton, 2023. [Online]. Available: https://us.norton.com/blog/privacy/cloud-security-risks [2]. A. I. Tahirkheli et al., "A survey on modern cloud computing security over smart city networks: Threats, vulnerabilities, consequences, countermeasures, and challenges," Electronics, vol. 10, no. 15, p. 1811, 2021. [3]. Biz Technology Solutions, "8 cloud computing security challenges," Biz Technology Solutions, Jan. 27, 2023. [Online]. Available: https://biztechnologysolutions.com/cloud-computing-security-challenges/ [4]. S. P, "New cloud security threats in 2023: How to stay protected," Cymune-Blogs, 2023. [Online]. Available: https://www.cymune.com/blog-details/cloud-security-threats-in-2023-and-how-to-stay-protected [5]. S. El Kafhali, I. El Mir, and M. Hanini, "Security threats, defense mechanisms, challenges, and future directions in cloud computing," Arch. Comput. Methods Eng., vol. 29, no. 1, pp. 223–246, 2022. [6]. J. J. Ang'udi, "Security challenges in cloud computing: A comprehensive analysis," World J. Adv. Eng. Technol. Sci., vol. 10, no. 2, pp. 155–181, 2023. [7]. G. Shanmugasundaram, V. Aswini, and G. Suganya, "A comprehensive review on cloud computing security," in 2017 Int. Conf. Innov. Inf., Embedded Commun. Syst. (ICIIECS), 2017, pp. 1–5. [8]. N. Subramanian and A. Jeyaraj, "Recent security challenges in cloud computing," Comput. Electr. Eng., vol. 71, pp. 28–42, 2018. [9]. G. Ramachandra, M. Iftikhar, and F. A. Khan, "A comprehensive survey on security in cloud computing," Procedia Comput. Sci., vol. 110, pp. 465–472, 2017. [10]. W. Ahmad et al., "Cyber security in IoT-based cloud computing: A comprehensive survey," Electronics, vol. 11, no. 1, p. 16, 2021. [11]. H. Tabrizchi and M. Kuchaki Rafsanjani, "A survey on security challenges in cloud computing: Issues, threats, and solutions," J. Supercomput., vol. 76, no. 12, pp. 9493–9532, 2020. [12]. L. Coppolino et al., "Cloud security: Emerging threats and current solutions," Comput. Electr. Eng., vol. 59, pp. 126–140, 2017. [13]. M. F. Mushtaq et al., "Cloud computing environment and security challenges: A review," Int. J. Adv. Comput. Sci. Appl., vol. 8, no. 10, 2017. [14]. Y. Li and Q. Liu, "A comprehensive review study of cyber-attacks and cyber security; Emerging trends and recent developments," Energy Rep., vol. 7, pp. 8176–8186, 2021. [15]. Ö. Aslan et al., "A comprehensive review of cyber security vulnerabilities, threats, attacks, and solutions," Electronics, vol. 12, no. 6, p. 1333, 2023. [16]. S. Basu et al., "Cloud computing security challenges & solutions—A survey," in 2018 IEEE 8th Annu. Comput. Commun. Workshop Conf. (CCWC), 2018, pp. 347–356. [17]. C. Butpheng, K. H. Yeh, and H. Xiong, "Security and privacy in IoT-cloud-based e-health systems—A comprehensive review," Symmetry, vol. 12, no. 7, p. 1191, 2020. [18]. M. Z. Afshar, "Exploring factors impacting organizational adaptation capacity of Punjab Agriculture & Meat Company (PAMCO)," Int. J. Emerg. Issues Soc. Sci. Arts Humanit., vol. 2, no. 1, pp. 1–10, 2023. [19]. M. R. Haque et al., "The role of macroeconomic discourse in shaping inflation views: Measuring public trust in Federal Reserve policies," J. Bus. Insight Innov., vol. 2, no. 2, pp. 88–106, 2023. [20]. M. A. Sayem et al., "AI-driven diagnostic tools: A survey of adoption and outcomes in global healthcare practices," Int. J. Recent Innov. Trends Comput. Commun., vol. 11, no. 10, pp. 1109–1122, 2023. [21]. B. Alouffi et al., "A systematic literature review on cloud computing security: Threats and mitigation strategies," IEEE Access, vol. 9, pp. 57792–57807, 2021. [22]. U. A. Butt et al., "A review of machine learning algorithms for cloud computing security," Electronics, vol. 9, no. 9, p. 1379, 2020. [23]. O. Can et al., "A comprehensive literature of genetics cryptographic algorithms for data security in cloud computing," Cybern. Syst., pp. 1–35, 2023. [24]. M. Javaid, A. Haleem, R. P. Singh, and R. Suman, "Towards insighting cybersecurity for healthcare domains: A comprehensive review of recent practices and trends," Cybersecur. Appl., vol. 1, p. 100016, 2023. [25]. M. M. Sadeeq et al., "IoT and Cloud computing issues, challenges and opportunities: A review," Qubahan Acad. J., vol. 1, no. 2, pp. 1–7, 2021. [26]. A. A. Abbasi et al., "Software-defined cloud computing: A systematic review on latest trends and developments," IEEE Access, vol. 7, pp. 93294–93314, 2019. [27]. A. Heidari and M. A. Jabraeil Jamali, "Internet of Things intrusion detection systems: A comprehensive review and future directions," Cluster Comput., vol. 26, no. 6, pp. 3753–3780, 2023. [28]. S. Ahmed, I. Ahmed, M. Kamruzzaman, and R. Saha, "Cybersecurity challenges in IT infrastructure and data management: A comprehensive review of threats, mitigation strategies, and future trend," Glob. Mainstream J. Innov. Eng. Emerg. Technol., vol. 1, no. 01, pp. 36–61, 2022. [29]. O. I. Abiodun et al., "Comprehensive review of artificial neural network applications to pattern recognition," IEEE Access, vol. 7, pp. 158820–158846, 2019. [30]. A. Fahim, M. Hasan, and M. A. Chowdhury, "Smart parking systems: Comprehensive review based on various aspects," Heliyon, vol. 7, no. 5, 2021. [31]. A. Khanna and S. Kaur, "Internet of things (IoT), applications and challenges: A comprehensive review," Wirel. Pers. Commun., vol. 114, pp. 1687–1762, 2020. [32]. A. K. Jain, S. R. Sahoo, and J. Kaubiyal, "Online social networks security and privacy: Comprehensive review and analysis," Complex Intell. Syst., vol. 7, no. 5, pp. 2157–2177, 2021. [33]. L. Tightiz and H. Yang, "A comprehensive review on IoT protocols’ features in smart grid communication," Energies, vol. 13, no. 11, p. 2762, 2020. [34]. P. J. Sun, "Privacy protection and data security in cloud computing: A survey, challenges, and solutions," IEEE Access, vol. 7, pp. 147420–147452, 2019. [35]. U. Agarwal et al., "Blockchain technology for secure supply chain management: A comprehensive review," IEEE Access, vol. 10, pp. 85493–85517, 2022. [36]. M. Amani et al., "Google earth engine cloud computing platform for remote sensing big data applications: A comprehensive review," IEEE J. Sel. Top. Appl. Earth Obs. Remote Sens., vol. 13, pp. 5326–5350, 2020.

Journal of Engineering and Computational Intelligence ReviewJun 30, 20240 citations

A Survey on Security with Quantum Computing

Manik Kumar Sangala, Robin Naira, Akhirul Islam +2 more

Quantum computing has emerged as a transformative computing paradigm capable of solving problems that remain computationally infeasible for classical systems; however, its rapid advancement also introduces significant security, privacy, and reliability concerns. In this context, this survey presents a comprehensive review of security challenges and mitigation strategies associated with quantum computing, focusing on security issues in quantum computers, security threats caused by quantum computers, and security mechanisms developed for quantum systems. The paper examines vulnerabilities in quantum hardware and software, the impact of quantum computing on existing cryptographic infrastructures and cybersecurity mechanisms, and the development of quantum-resilient solutions such as post-quantum cryptography, quantum-safe communication protocols, quantum intrusion detection systems, and quantum-aware software engineering techniques. In addition, the survey discusses emerging applications of quantum technologies in cybersecurity domains, including malware detection, network intrusion detection, Internet of Things (IoT) security, and secure communication systems. Furthermore, the paper analyzes existing quantum error mitigation and fault-tolerance approaches designed to improve the robustness and trustworthiness of quantum computation under realistic noisy conditions. By consolidating recent advances, open research challenges, and future directions, this survey provides a structured overview of the evolving intersection between quantum computing and cybersecurity, while serving as a reference for researchers and practitioners working toward secure, resilient, and quantum-ready computing infrastructures.

arXiv:2606.00058May 19, 20260 citations

Future-Proofing Cloud Security Against Quantum Attacks: Risk, Transition, and Mitigation Strategies

Yaser Baseri, Abdelhakim Senhaji Hafid, Arash Habibi Lashkari

Quantum Computing (QC) threatens the cryptographic foundations of Cloud Computing (CC), exposing distributed infrastructures to novel attack vectors. This survey provides comprehensive analysis of quantum-safe cloud security, examining vulnerabilities, transition strategies, and layer-specific countermeasures across nine architectural layers (application, data, runtime, middleware, OS, virtualization, server, storage, networking). We employ STRIDE-based risk assessment aligned with NIST SP 800-30 to evaluate quantum threats through three transition phases: pre-transition (classical cryptography vulnerabilities), hybrid (migration risks), and post-transition (PQC implementation weaknesses including side-channel attacks). Our security framework integrates hybrid cryptographic strategies (algorithmic combiners, dual/composite certificates, protocol-level migration), cryptographic agility, and risk-prioritized mitigation tailored to cloud environments. We benchmark NIST-standardized PQC algorithms for performance and deployment suitability, assess side-channel and implementation vulnerabilities, and analyze quantum-safe strategies from leading CSPs (AWS, Azure, GCP). The survey delivers layer-specific threat taxonomies, likelihood-impact risk matrices, and CSP-informed deployment roadmaps for cloud architects, policymakers, and researchers. We identify six critical research directions: standardization and interoperability, hardware acceleration and performance optimization, AI-enhanced security and threat mitigation, integration with emerging cloud technologies, systemic preparedness and workforce development, and migration frameworks with crypto-agility.

arXiv:2509.15653Sep 19, 20250 citations

Cybersecurity in the quantum era: Assessing the impact of quantum computing on infrastructure

Yaser Baseri, Vikas Chouhan, Ali Akbar Ghorbani

The advent of quantum computing marks a transformative era in cybersecurity, challenging traditional cryptographic frameworks and broadening the horizons of computational capabilities. This paper navigates the transition to a quantum-resistant security framework, offering a critical analysis of encryption methods essential for the protection of critical infrastructure and cloud services in the quantum era. It meticulously evaluates the effects of quantum computing across various infrastructure layers, including applications, data, runtime, middleware, operating systems, virtualization, hardware, storage, and networks. Through a nuanced exploration of potential vulnerabilities and the evolving threat landscape conferred by quantum technologies, our study delivers strategic insights for the development of effective countermeasures. Our comprehensive inquiry underscores the pivotal shift necessitated by the disruptive potential of quantum computing, advocating for preemptive and inventive security strategies. It calls for concerted, multi-sectoral collaboration to cultivate resilient, quantum-resistant cryptographic practices. Through meticulous research, we articulate the emergent threat vectors posed by quantum technologies and evaluate post-quantum cryptographic solutions, laying the groundwork for safeguarding both current and prospective infrastructural and cloud ecosystems. Significantly, this study introduces a tailored security blueprint encompassing nine critical infrastructure components, reinforcing each domain’s defenses against quantum-induced cyber threats. Our strategic vulnerability assessment provide essential countermeasures, equipping stakeholders with the ability to navigate the complex, quantum-threatened landscape. These contributions are integral for those tasked with critical infrastructure stewardship, influencing design, implementation, and policy formulation. In essence, this paper not only forecasts quantum threats but also offers a sophisticated, actionable framework for strengthening infrastructure and cloud environments against the multifaceted challenges of the quantum era.

arXiv:2404.10659Computers & SecurityApr 8, 202620 citations

Quantum-Resilient Architectures for Enterprise and Cloud Information Systems, Implications of Quantum Computing for Enterprise Cybersecurity and Data Integrity

MANIKANTHA VARAPRASAD INAKOLLU

The emergence of quantum computing presents unprecedented challenges to contemporary enterprise cybersecurity frameworks. Current cryptographic systems that protect sensitive data and secure communications will become vulnerable to quantum attacks within the next decade. This research examines the implications of quantum computing advancement for enterprise and cloud information systems, proposing quantum-resilient architectural frameworks that can withstand both classical and quantum threats. We analyze the timeline of quantum computing development, assess vulnerabilities in existing enterprise security infrastructures, and evaluate post-quantum cryptographic approaches suitable for organizational implementation. Through comparative analysis of quantum-resistant algorithms and architectural patterns, this study demonstrates that enterprises must begin transitioning to quantum-safe systems immediately despite quantum computers' current limitations. The research reveals that organizations storing long-lived sensitive data face immediate risks from "harvest now, decrypt later" attacks where adversaries collect encrypted data today for future quantum decryption. Our proposed architecture integrates post-quantum cryptography, hybrid classical-quantum security approaches, and crypto-agility frameworks that enable organizations to adapt as quantum threats evolve. The findings contribute practical guidance for enterprise architects, security professionals, and cloud service providers navigating the transition to quantum-resilient information systems. This work emphasizes that quantum preparedness is not a future concern but an urgent present requirement for organizations handling sensitive data with long confidentiality requirements.

Nov 30, 20250 citations