Intrusion detection in unmanned-aerial-vehicle (UAV) swarms is complicated by high mobility, non-stationary traffic, and severe class imbalance. Leveraging a 120 k-flow simulation corpus that covers five attack types, we benchmark three quantum-machine-learning (QML) approaches - quantum kernels, variational quantum neural networks (QNNs), and hybrid quantum-trained neural networks (QT-NNs) - against strong classical baselines. All models consume an 8-feature flow representation and are evaluated under identical preprocessing, balancing, and noise-model assumptions. We analyse the influence of encoding strategy, circuit depth, qubit count, and shot noise, reporting accuracy, macro-F1, ROC-AUC, Matthews correlation, and quantum-resource footprints. Results reveal clear trade-offs: quantum kernels and QT-NNs excel in low-data, nonlinear regimes, while deeper QNNs suffer from trainability issues, and CNNs dominate when abundant data offset their larger parameter count. The complete codebase and dataset partitions are publicly released to enable reproducible QML research in network security.
Intrusion detection in unmanned-aerial-vehicle (UAV) swarms is complicated by high mobility, non-stationary traffic, and severe class imbalance. Leveraging a 120 k-flow simulation corpus that covers five attack types, we benchmark three quantum-machine-learning (QML) approaches - quantum kernels, variational quantum neural networks (QNNs), and hybrid quantum-trained neural networks (QT-NNs) - against strong classical baselines. All models consume an 8-feature flow representation and are evaluated under identical preprocessing, balancing, and noise-model assumptions. We analyse the influence of encoding strategy, circuit depth, qubit count, and shot noise, reporting accuracy, macro-F1, ROC-AUC, Matthews correlation, and quantum-resource footprints. Results reveal clear trade-offs: quantum kernels and QT-NNs excel in low-data, nonlinear regimes, while deeper QNNs suffer from trainability issues, and CNNs dominate when abundant data offset their larger parameter count. The complete codebase and dataset partitions are publicly released to enable reproducible QML research in network security.
Intrusion Detection Systems (IDSs) are a cornerstone of modern cybersecurity; however, their performance is increasingly constrained by high-dimensional network traffic and the scalability limitations of classical machine learning approaches. Quantum Machine Learning (QML) has recently emerged as a promising paradigm by leveraging quantum feature spaces and hybrid quantum–classical optimization. In this work, we present a unified and reproducible benchmarking framework for QML-based intrusion detection under realistic Noisy Intermediate-Scale Quantum (NISQ) constraints. The proposed framework integrates hybrid Quantum Neural Networks (QNNs) and Quantum Support Vector Machines (QSVMs) within a consistent experimental pipeline, enabling a systematic comparison of quantum models, embedding strategies, and dimensionality reduction techniques. Experiments are conducted on the NSL-KDD benchmark dataset for both binary (normal versus attack) and multiclass intrusion detection tasks. Multiple quantum embedding strategies, including angle, amplitude, and Instantaneous Quantum Polynomial (IQP) embeddings, are evaluated in conjunction with PCA-based dimensionality reduction to analyze trade-offs between expressivity, circuit complexity, and computational cost. The proposed models are benchmarked against strong classical baselines under identical preprocessing and evaluation conditions. The results demonstrate that QNN- and QSVM-based IDS models achieve competitive and, in several scenarios, superior performance compared to classical approaches, particularly in multiclass settings characterized by nonlinear and imbalanced data distributions. In addition, we provide an in-depth analysis of scalability limitations, training complexity, and NISQ feasibility, highlighting practical considerations for real-world deployment. To ensure full reproducibility, all implementation details, datasets, and experimental configurations are publicly available at: https://github.com/raidanis/QML-IDS-NSLKDD. These findings position hybrid QML as a promising complementary paradigm for next-generation intrusion detection systems, particularly in low-dimensional and high-complexity feature spaces.
Quantum machine learning (QML) is increasingly investigated for network intrusion detection, but the practical value of current quantum models remains uncertain because many studies rely on small simulated data sets, idealized execution, weak classical baselines, or isolated accuracy comparisons. This study develops and evaluates a resource-aware hybrid quantum-classical intrusion detection framework that combines fixed fidelity quantum kernels, repaired Quantum Kernel Alignment (QKA), a Variational Quantum Classifier (VQC), LightGBM, prototype-based kernel reduction, and probabilistic stacking. Experiments use the UNSW-NB15 benchmark under a leakage-aware preprocessing protocol and repeated evaluation across five random seeds. The experimental program covers 4- and 6-qubit representations, multiple training sizes, prototype budgets, and finite-shot configurations, yielding 260 experimental configurations/runs. The strongest quantum-assisted model, a 6-qubit QKA-VQC-LightGBM stack at 100 samples per class, obtains mean F1=0.8480, MCC=0.7092, ROC-AUC=0.9398, and PR-AUC=0.9302. Repaired QKA improves F1 from 0.8043 for the corresponding fixed kernel to 0.8089, while 50-prototype QKA attains F1=0.8257 with a more favorable kernel-workload trade-off than larger prototype budgets. Finite-shot experiments between 1,024 and 4,096 shots remain stable in simulation. However, full-data LightGBM remains stronger overall (F1=0.8957, MCC=0.8068, ROC-AUC=0.9755, PR-AUC=0.9704), and corrected statistical tests do not establish general quantum superiority. These findings motivate a Selective Quantum Intrusion Detection System (S-QIDS), in which classical inference handles high-confidence traffic and quantum processing is reserved for uncertain, novel, or high-risk observations. The study therefore reframes near-term quantum intrusion detection from unconditional quantum advantage toward measurable quantum utility, quantum-classical complementarity, and resource-aware quantum intervention.
Intrusion detection systems (IDS) are essential for identifying cyber threats in complex digital environments. Machine learning (ML) is widely used to improve IDS by detecting anomalies, but classical ML methods often struggle with high-dimensional data and evolving threats. Quantum machine learning (QML) has been proposed as a potential paradigm to overcome some of these limitations, but is constrained by noisy intermediate-scale quantum (NISQ) challenges, affecting quality. This study systematically evaluates three QML models, Pegasos Quantum Support Vector Classifier (QSVC), Variational Quantum Classifier (VQC), and a Hybrid Quantum–Classical Neural Network (HQNN), for network anomaly detection. The models were optimized and tested on the ToN_IoT and NSL-KDD datasets using IBM quantum simulators under both ideal and noisy conditions. Performance was analyzed through the F1-score distribution as a function of circuit complexity, revealing how entanglement and noise affect robustness across different backends. Comparisons with classical models contextualize the current maturity of QML for cybersecurity, while computational time was used as an indicator of model complexity to explore accuracy–efficiency trade-offs. Among all configurations, Pegasos-QSVC achieved the best results, with 94.60% accuracy and an F1-score of 94.13%. The findings provide practical guidelines for designing noise-resilient QML models and highlight their potential for reliable intrusion detection under realistic quantum conditions.
Unmanned aerial vehicles (UAVs) are cyber-physical systems whose attack surface spans networked avionics and on-board sensor fusion: a compromised GPS or battery module can mimic a benign mission segment and evade naive anomaly detectors. We present a leakage-free evaluation of quantum machine learning for UAV anomaly detection on the multi-sensor TLM:UAV benchmark. Three contributions support the study. (i) A group-aware temporal protocol (B2) partitions the dataset into ten contiguous TimeUS blocks and evaluates over ten seeds, eliminating the inflation produced by random stratified splits that mix neighbouring samples. (ii) A three-mode feature audit (full/loose/strict) quantifies how much accuracy stems from instantaneous physical signals versus contextual proxies (cumulative energy, battery state, GPS trajectory). (iii) A hybrid XGBoost + Data Reuploading (DRU) classifier is benchmarked against five paired non-linear controls (raw, PCA, polynomial-2, random-RBF, and an untrained DRU map) under identical budgets. The standalone DRU does not consistently match the strongest classical baseline across seeds; however, the trained-DRU hybrid is the only model whose mean F1 macro shifts upward from full to strict (+0.05), a directional signal that the per-seed standard deviations prevent from being interpreted as a statistically established difference. The trained-DRU hybrid also records the lowest mean false-alarm rate under proxy-free evaluation, subject to the inter-seed variance reported. We frame this as an incremental, reproducible quantum-enhanced hybrid benefit, and provide an open Qiskit 2.x implementation as a benchmark for cybersecurity analytics in NISQ-era aerospace systems.
Weaknesses arising from heterogeneous device structure, high-dimensional traffic patterns, and more complex nonlinear attack behaviors. The traditional intrusion detection systems (IDS), which rely on the classical machine learning models, often face the challenges of scalability, feature explosion, and low representational ability when handling large-scale IoT traffic data. To meet these challenges, we propose a Hybrid Quantum-Classical Variational Neural Network (HQCVNN) for effective intrusion detection in IoT systems. The model utilizes a Variational Quantum Circuit (VQC) as a nonlinear quantum feature map followed by dense neural layers for overall classification. Angle embedding with entanglement layers enables the encoding of quantum data and leads to a better separability of features in high-dimensional space, whilst the classical optimization guarantees efficient training on NISQ time scales. The model is implemented using Qiskit and evaluated on classical benchmark intrusion detection datasets. Experimental results show the proposed method has better classification accuracy, F1-score, and complexity reduction than conventional ANNs and SVMs. The results demonstrate the promise of hybrid quantum machine learning systems with end-to-end general-purpose capabilities in future IoT security and provide pragmatic impressions on how to deploy them on near-term quantum processors.
Abstract Reliable radar-based classification of small unmanned aerial vehicles (UAVs, drones) is hampered by low signal-to-noise ratio (SNR), non-Gaussian clutter, and site-specific shifts. This motivates interest in Quantum Machine Learning (QML) as a potentially more noise-resilient alternative to classical methods, yet reproducible advantages over strong classical baselines remain unclear. This study presents a controlled, like-for-like comparison between feed-forward neural networks and pure QML models without a preceding classical dimensionality-reduction encoder. All models operate on the same binned Fourier features. The QML variants span two data encodings (angle, amplitude), two variational circuit families, and an optional Quantum Fourier Transform, and are trained either with Adam or the gradient-free Asexual Reproduction Optimization (ARO) under matched evaluation budgets.Across three regimes (noiseless, additive white Gaussian noise (AWGN), and colored AR(1) complex Gaussian noise (cAR(1)-GN)), QML achieves competitive accuracy with only tens of parameters and, in two settings (noiseless and AWGN), slightly exceeds the best classical baselines, although these differences are not statistically significant. Under temporally correlated cAR(1) Gaussian noise, the tuned classical network significantly outperforms the best QML configuration. Overall, QML provides parameter-efficient performance parity in two of three conditions but no definitive advantage. The results highlight a strong dependence on the noise regime and point to angle-encoded, ARO-trained circuits as the most promising QML candidates for noisy radar-based drone classification.