Assessing cyber risk in complex IT infrastructures poses significant challenges due to the dynamic, interconnected nature of digital systems. Traditional methods often fall short, relying on static and largely qualitative models that do not scale with system complexity and fail to capture systemic interdependencies. In this work, we introduce a novel quantitative approach to cyber risk assessment based on Quadratic Unconstrained Binary Optimization (QUBO), a formulation compatible with both classical computing and quantum annealing. We demonstrate the capabilities of our approach using a realistic 255-nodes layered infrastructure, showing how risk spreads in non-trivial patterns that are difficult to identify through visual inspection alone. To assess scalability, we further conduct extensive experiments on networks up to 1000 nodes comparing classical, quantum, and hybrid classical-quantum workflows. Our results reveal that although quantum annealing produces solutions comparable to classical heuristics, its potential advantages are significantly hindered by the embedding overhead required to map the densely connected cyber-risk QUBO onto the limited connectivity of current quantum hardware. By contrast, hybrid quantum-classical solvers avoid this bottleneck and therefore emerge as a promising option, combining competitive scaling with an improved ability to explore the solution space and identify more stable risk configurations. Overall, this work delivers two main advances. First, we present a rigorous, tunable, and generalizable mathematical model for cyber risk that can be adapted to diverse infrastructures and domains through flexible parameterization. Second, we provide the first comparative study of classical, quantum, and hybrid approaches for cyber risk scoring at scale, highlighting the emerging potential of hybrid quantum-classical methods for large-scale infrastructures.
Assessing cyber risk in complex IT infrastructures poses significant challenges due to the dynamic, interconnected nature of digital systems. Traditional methods often fall short, relying on static and largely qualitative models that do not scale with system complexity and fail to capture systemic interdependencies. In this work, we introduce a novel quantitative approach to cyber risk assessment based on Quadratic Unconstrained Binary Optimization (QUBO), a formulation compatible with both classical computing and quantum annealing. We demonstrate the capabilities of our approach using a realistic 255-nodes layered infrastructure, showing how risk spreads in non-trivial patterns that are difficult to identify through visual inspection alone. To assess scalability, we further conduct extensive experiments on networks up to 1000 nodes comparing classical, quantum, and hybrid classical-quantum workflows. Our results reveal that although quantum annealing produces solutions comparable to classical heuristics, its potential advantages are significantly hindered by the embedding overhead required to map the densely connected cyber-risk QUBO onto the limited connectivity of current quantum hardware. By contrast, hybrid quantum-classical solvers avoid this bottleneck and therefore emerge as a promising option, combining competitive scaling with an improved ability to explore the solution space and identify more stable risk configurations. Overall, this work delivers two main advances. First, we present a rigorous, tunable, and generalizable mathematical model for cyber risk that can be adapted to diverse infrastructures and domains through flexible parameterization. Second, we provide the first comparative study of classical, quantum, and hybrid approaches for cyber risk scoring at scale, highlighting the emerging potential of hybrid quantum-classical methods for large-scale infrastructures.
In many complex networking systems, identifying critical nodes whose removal maximally disrupts network connectivity remains an important yet computationally challenging problem for network vulnerability analysis. Finding near-optimal solutions is known to be NP-hard. In this paper, we explore the potential of near-term quantum computing devices to efficiently solve the k-Critical Node Detection (k-CND) problem. We formulate the problem as a quadratic unconstrained binary optimization (QUBO), a mathematical optimization over binary variables amenable to solution on quantum annealers. We present a novel integer linear programming (ILP) formulation and its conversion into QUBOs and provide benchmarking results on D-Wave's quantum annealers. Our theoretical analysis proves that our proposed formulation, ILP2, generates substantially smaller QUBO than the state-of-the-art ILP1 formulation. Experimentally, our efficient QUBO yields a 59.7% decrease in QUBO variables on a graph with 10 vertices and 40 edges, and an 11.7% reduction in qubits on a 15-vertex, 22-edge graph compared to that of QUBO1. We analyze the solution quality and running time across quantum, classical, and hybrid solvers to assess the potential for quantum advantage. Our work showcases the promise and challenges of tackling this important graph problem on near-term quantum hardware.
Cybersecurity in telecommunication networks often leads to hard combinatorial optimization problems that are challenging to solve with classical methods. This work investigates the practical feasibility of using quantum annealing to address the Restricted Vertex Minimum Multicut Problem. The problem is formulated as a Quadratic Unconstrained Binary Optimization model and implemented on D-Wave s quantum annealer. Rather than focusing on solution quality alone, we analyze key aspects of the quantum workflow including minor embedding techniques, chain length, topology constraints, chain strength selection, unembedding procedures, and postprocessing. Our results show that quantum annealing faces substantial hardware-level constraints limitations in embedding and scalability, especially for large instances, while hybrid quantum-classical solvers provide improved feasibility. This study offers a realistic assessment of the D-Wave system s current capabilities and identifies crucial parameters that govern the success of quantum optimization in cybersecurity-related network problems.
Cybersecurity in telecommunication networks often leads to hard combinatorial optimization problems that are challenging to solve with classical methods. This work investigates the practical feasibility of using quantum annealing to address the Restricted Vertex Minimum Multicut Problem. The problem is formulated as a Quadratic Unconstrained Binary Optimization model and implemented on D-Wave’s quantum annealer. Rather than focusing on solution quality alone, we analyze key aspects of the quantum workflow including minor embedding techniques, chain length, topology constraints, chain strength selection, unembedding procedures, and postprocessing. Our results show that quantum annealing faces substantial hardware-level constraints limitations in embedding and scalability, especially for large in-stances, while hybrid quantum-classical solvers provide improved feasibility. This study offers a realistic assessment of the D-Wave system’s current capabilities and identifies crucial parameters that govern the success of quantum optimization in cybersecurity-related network problems.
Quantum algorithms have shown promise in solving Quadratic Unconstrained Binary Optimization (QUBO) problems, benefiting from their connection to the transverse field Ising model.Various Ising solvers, both classical and quantum, have emerged to tackle such problems efficiently but lack global optimality guarantees and oftentimes sufer from hardware limitations such as limited qubit availability.In this work, we propose a hybrid branch-andbound (B&B) framework that integrates Ising solvers as heuristics within a classical B&B algorithm.Unlike prior theoretical studies, our work presents a practical implementation, available as open-source at GitHub.We explore when and where to apply Ising solvers in the search tree, and introduce a custom branching rule optimized QUBO embedding.Our method is evaluated on hundreds of QUBO instances from QUBOLib.jl using Gurobi and the D-Wave quantum annealer.Our Results show up to 11% less solution time and 17% fewer nodes compared to default Gurobi, an off-the-shelf commercial optimization solver.These findings demonstrate the value of hybrid quantum-classical strategies for enhancing exact optimization.
We propose a unified approach for reformulating diverse computational challenges into Quadratic Unconstrained Binary Optimization (QUBO) models and solving them via quantum annealing. By applying this framework across multiple domains, we demonstrate its flexibility in handling structurally different problems within a single mathematical formulation. The study highlights QUBO’s capability to exploit quantum parallelism, integrate regularization seamlessly, and address ill-posed inverse problems. These advantages position QUBO-based quantum annealing as a promising tool for large-scale optimization and reconstruction tasks, with strong potential for impact in scientific computing, engineering, and data-driven applications.
Quantum machine learning (QML) has gained attention for its potential to leverage quantum advantages in processing high-dimensional data, capturing complex correlations, and exploring large solution spaces, beyond the limits of classical machine learning. In infrastructure risk, resilience, disruption, and recovery analysis, these capabilities position QML as a promising research direction with not yet realised applicability. This study examines whether QML studies move beyond computational novelty to address the substantive requirements of infrastructure-oriented disaster risk management. Using a systematic literature review of records from Scopus and Web of Science, the search retrieved 784 records before deduplication and retained 33 studies after staged screening and full-text eligibility assessment. Studies were evaluated through an infrastructure risk lens. The evidence base is narrow in sectoral scope, dominated by energy and power applications, and more developed in restoration, dynamic security, cyber-physical protection, operational instability, and disruption-oriented operational analysis than in hazard-explicit infrastructure disaster-risk assessment. Hybrid quantum-classical workflows predominate, while many studies rely on simulated, benchmarked, stylised, or case-specific data with limited validation and uneven reporting of data and preprocessing practices. Although selected studies show potential for restoration, classification, anomaly detection, optimisation, and adaptive coordination, the field remains partly connected to core infrastructure-risk concerns including hazard representation, vulnerability, interdependence, cascading disruption, continuity, and recovery dynamics. QML should therefore be understood not as a mature framework for infrastructure-oriented disaster risk management, but as a promising computational frontier with potential to advance the field through broader sectoral application, stronger empirical validation, multi-hazard integration, and benchmarking against classical methods.