Deep neural networks remain highly vulnerable to adversarial perturbations, limiting their reliability in security- and safety-critical applications. To address this challenge, we introduce QShield, a modular hybrid quantum-classical neural network (HQCNN) architecture designed to enhance the adversarial robustness of classical deep learning models. QShield integrates a conventional convolutional neural network (CNN) backbone for feature extraction with a quantum processing module that encodes the extracted features into quantum states, applies structured entanglement operations under realistic noise models, and outputs a hybrid prediction through a dynamically weighted fusion mechanism implemented via a lightweight multilayer perceptron (MLP). We systematically evaluate both classical and hybrid quantum-classical models on the MNIST, OrganAMNIST, and CIFAR-10 datasets, using a comprehensive set of robustness, efficiency, and computational performance metrics. Our results demonstrate that classical models are highly vulnerable to adversarial attacks, whereas the proposed hybrid models with entanglement patterns maintain high predictive accuracy while substantially reducing attack success rates across a wide range of adversarial attacks. Furthermore, the proposed hybrid architecture significantly increased the computational cost required to generate adversarial examples, thereby introducing an additional layer of defense. These findings indicate that the proposed modular hybrid architecture achieves a practical balance between predictive accuracy and adversarial robustness, positioning it as a promising approach for secure and reliable machine learning in sensitive and safety-critical applications.
Deep neural networks remain highly vulnerable to adversarial perturbations, limiting their reliability in security- and safety-critical applications. To address this challenge, we introduce QShield, a modular hybrid quantum-classical neural network (HQCNN) architecture designed to enhance the adversarial robustness of classical deep learning models. QShield integrates a conventional convolutional neural network (CNN) backbone for feature extraction with a quantum processing module that encodes the extracted features into quantum states, applies structured entanglement operations under realistic noise models, and outputs a hybrid prediction through a dynamically weighted fusion mechanism implemented via a lightweight multilayer perceptron (MLP). We systematically evaluate both classical and hybrid quantum-classical models on the MNIST, OrganAMNIST, and CIFAR-10 datasets, using a comprehensive set of robustness, efficiency, and computational performance metrics. Our results demonstrate that classical models are highly vulnerable to adversarial attacks, whereas the proposed hybrid models with entanglement patterns maintain high predictive accuracy while substantially reducing attack success rates across a wide range of adversarial attacks. Furthermore, the proposed hybrid architecture significantly increased the computational cost required to generate adversarial examples, thereby introducing an additional layer of defense. These findings indicate that the proposed modular hybrid architecture achieves a practical balance between predictive accuracy and adversarial robustness, positioning it as a promising approach for secure and reliable machine learning in sensitive and safety-critical applications.
Quantum Machine Learning (QML) fuses quantum computing with machine learning to address complex tasks with potential speedups over classical methods. While QML models such as variational quantum classifiers (QVC), quantum multilayer perceptron(QMLP) models and quantum convolutional neural networks (QCNN) have demonstrated promise in applications like image recognition and malware classification, they remain vulnerable to adversarial threats. Inspired by the vulnerabilities in classical ML, this work systematically investigates how attacks-ranging from training-time poisoning and inferencetime evasion (e.g., quantum versions of FGSM and PGD) to deployment-time trigger attacks-manifest in quantum circuits. We explore how classical adversarial strategies adapt to quantum models through parameterized encodings, hybrid architectures, and probabilistic outputs. The poster evaluates different quantum classifiers under adversarial settings, comparing their robustness, trainability, and resilience to perturbations. Defense mechanisms such as randomized encoding, engineered noise channels, and quantum adversarial training are analyzed in relation to specific threat types. In addition, we assess how quantum models behave differently than classical counterparts under attack, and how quantum-specific design constraints can either exacerbate or mitigate these effects. Our ultimate goal is to define and construct robust QML systems that are both theoretically sound and practically secure. By synthesizing results across multiple QML architectures and threat models, this work provides actionable insight into the development of resilient quantum classifiers, paving the way toward trustworthy and scalable quantum machine learning.
In this work, we investigate the performance of hybrid quantum-classical convolutional neural networks (QCNNs) in medical image classification under the presence of adversarial attacks. Adversarial attacks pose a significant threat to image classification models, since they introduce subtle perturbations to input images, leading to incorrect predictions. Specifically, in this work, 10 QCNNs with their corresponding classic Convolutional Neural Networks (CNNs) counterparts are comparatively examined for their robustness, on two different medical image datasets using transfer learning, under two different adversarial attacks. In a subsequent step, the implementation of training models from scratch is also evaluated. With transfer learning on the X-ray dataset, CNN and QCNN models achieve high and comparable performance across most backbones. On the histopathological dataset, CNNs and QCNNs often generalize worse compared to the X-ray dataset, indicating head overfitting under domain shift. The adversarial evaluation results highlight that most models' robustness comes from the backbone rather than the head. QCNN models perform comparably to CNNs under attack and show improvements when trained from scratch. Overall, the results indicate that integrating quantum circuit mechanisms into classical CNN architectures can enhance the robustness of models in medical imaging tasks, representing a promising domain that warrants further investigation.
The integration of quantum machine learning (QML) within open radio access network (O-RAN) architectures presents a promising frontier for enhancing interference classification and optimizing various 6G network use cases. We introduce a novel hybrid quantum-classical neural network (HQCNN) design that addresses critical challenges in noisy intermediate-scale quantum (NISQ) environments through an innovative feature preprocessing pipeline. By integrating deep convolutional feature extraction via ResNet-18 with principal component analysis (PCA)-based dimensionality reduction, we develop a robust computational framework that mitigates quantum gate errors and enhances computational stability. However, despite these advancements, HQCNNs remain vulnerable to adversarial attacks. Traditional classical backdoor methods are ineffective in the quantum setting due to NISQ noise and gate synthesis complexities, while existing quantum attack techniques suffer from a lack of selectivity and adaptability, making them easy to detect. To address this, we introduce Q-Poison, a novel stealthy attack that leverages parameterized quantum gates to significantly enhance attack success rates. This attack induces systematic misclassification of trigger inputs while maintaining 54.5% clean data accuracy, compared to 78.5% without attack. Our results demonstrate a substantial 1.44-fold reduction in accuracy, highlighting the need for robust defense mechanisms in quantum-enabled networks.
Medical image classification is a critical component of modern healthcare; however, accurate diagnosis remains challenging due to limited annotated datasets, class imbalance, and the high dimensionality of medical imaging data. To address these challenges, a hybrid quantum-classical neural network (HQCNN) is proposed, integrating classical deep learning with variational quantum learning for medical image classification. The proposed architecture combines a five-layer convolutional neural network (CNN) for hierarchical feature extraction with a lightweight 4-qubit variational quantum circuit (VQC) incorporating quantum state encoding, superposition and entanglement mechanisms, and a quantum attention-Fourier (QAF) module. This hybrid design aims to improve nonlinear feature representation and quantum parameter efficiency while maintaining a shallow quantum circuit suitable for noisy intermediate-scale quantum (NISQ)-era constraints. Experimental evaluation on six MedMNIST benchmark datasets demonstrated competitive performance across both binary and multi-class classification tasks. HQCNN achieved 98.88% accuracy on the binary subset of PathMNIST (classes 0 vs. 1), 97.61% accuracy on the multi-class OrganAMNIST dataset, and 86.29% accuracy on BreastMNIST. Comparative experiments and statistical analyses demonstrated consistent improvements over the controlled BHQNN baseline, while component-wise ablation studies showed that the QAF module, superposition and entanglement mechanisms, and expressive parameterized rotations contributed to classification performance in a complementary and dataset-dependent manner. Moreover, HQCNN reduced the number of trainable quantum parameters by approximately 55.6% compared with the baseline hybrid quantum neural network (BHQNN). Noise-aware simulations further showed that the model retained relatively stable predictive performance under moderate depolarizing noise, supporting further evaluation under near-term quantum computing conditions. Overall, the results demonstrate that HQCNN provides a parameter-efficient hybrid quantum-classical framework for medical image classification and offers a promising foundation for further investigation of quantum-enhanced medical image analysis.
Deep learning has achieved significant success in pattern recognition, with convolutional neural networks (CNNs) serving as a foundational architecture for extracting spatial features from images. Quantum computing provides an alternative computational framework, a hybrid quantum-classical convolutional neural networks (QCCNNs) leverage high-dimensional Hilbert spaces and entanglement to surpass classical CNNs in image classification accuracy under comparable architectures. Despite performance improvements, QCCNNs typically use fixed quantum layers without incorporating trainable quantum parameters. This limits their ability to capture non-linear quantum representations and separates the model from the potential advantages of expressive quantum learning. In this work, we present a hybrid quantum-classical-quantum convolutional neural network (QCQ-CNN) that incorporates a quantum convolutional filter, a shallow classical CNN, and a trainable variational quantum classifier. This architecture aims to enhance the expressivity of decision boundaries in image classification tasks by introducing tunable quantum parameters into the end-to-end learning process. Through a series of small-sample experiments on MNIST, F-MNIST, and MRI tumor datasets, QCQ-CNN demonstrates competitive accuracy and convergence behavior compared to classical and hybrid baselines. We further analyze the effect of ansatz depth and find that moderate-depth quantum circuits can improve learning stability without introducing excessive complexity. Additionally, simulations incorporating depolarizing noise and finite sampling shots suggest that QCQ-CNN maintains a certain degree of robustness under realistic quantum noise conditions. While our results are currently limited to simulations with small-scale quantum circuits, the proposed approach offers a potentially promising direction for hybrid quantum learning in near-term applications.
The integration of quantum computing principles with classical deep learning architectures has emerged as a promising direction for advancing image recognition systems beyond the limitations of purely classical convolutional neural networks (CNNs). This study proposes and analyzes a hybrid quantum–classical deep learning framework based on quanvolutional neural network (QNN) principles, where quantum circuits are embedded within convolutional feature extraction layers to enhance representation capability. The research investigates how quantum-enhanced filters, particularly quanvolutional layers, contribute to improved feature diversity, non-linear transformation capacity, and classification accuracy in image recognition tasks. Building upon established convolutional architectures and quantum machine learning theories, the proposed framework integrates quantum random circuit encoding with classical deep neural networks to evaluate performance gains in comparison to conventional CNN models. The study further incorporates theoretical insights from hybrid quantum-classical learning systems, emphasizing the role of parameterized quantum circuits in feature mapping and optimization stability. The methodology is grounded in NISQ-era quantum computing constraints and leverages hybrid optimization strategies to ensure computational feasibility. Experimental evaluation demonstrates that quanvolution-based models can provide improved robustness in feature extraction, particularly in high-dimensional image spaces, while maintaining competitive computational efficiency. However, scalability limitations and noise sensitivity in quantum circuits remain key challenges. Overall, this work contributes to the growing field of quantum-enhanced machine learning by providing a structured performance analysis of hybrid quanvolutional architectures and highlighting their potential role in next-generation intelligent visual recognition systems.