New Journal of Physics

Detecting quantum attacks: a machine learning based defense strategy for practical continuous-variable quantum key distribution

Yiyu Mao, Wenti Huang, Hai Zhong, Yijun Wang, Hao Qin, Ying Guo, Duan Huang

Published Jul 23, 2020• 75 citations

Abstract

Abstract The practical security of a continuous-variable quantum key distribution (CVQKD) system is compromised by various attack strategies. The existing countermeasures against these attacks are to exploit different real-time monitoring modules to prevent different types of attacks, which significantly depend on the accuracy of the estimated excess noise and lack a universal defense method. In this paper, we propose a defense strategy for CVQKD systems to address these disadvantages and resist most of the known attack types. We investigate several features of the pulses that would be affected by different types of attacks, derive a feature vector based on these features as the input of an artificial neural network (ANN) model, and show the training and testing process of the ANN model for attack detection and classification. Simulation results show that the proposed scheme can effectively detect most of the known attacks at the cost of reducing a small part of secret keys and transmission distance. It establishes a universal attack detection model by simply monitoring several features of the pulses without knowing the exact type of attack in advance.

DOI: 10.1088/1367-2630/aba8d4

Related papers

Machine-learning-based detection for quantum hacking attacks on continuous-variable quantum-key-distribution systems

Chao Ding, Shi Wang, Yaonan Wang +3 more

Continuous-variable quantum key distribution (CVQKD) is a mature technology that can theoretically provide an unconditional security guarantee. However, a practical CVQKD system may be vulnerable to various quantum hacking attacks due to imperfect devices and insufficient assumptions. In this paper, we propose a universal defense strategy called a machine-learning-based attack detection scheme (MADS). Leveraging the combined advantages of density-based spatial clustering of applications with noise (DBSCAN) and multiclass support vector machines (MCSVMs), MADS demonstrates remarkable effectiveness in detecting quantum hacking attacks. Specifically, we first establish a set of attack-related features to extract feature vectors. These vectors are then utilized as input data for DBSCAN to identify and remove any noise or outliers. Finally, the trained MCSVMs are employed to classify and predict the processed data. The predicted results can immediately determine whether or not to generate a final secret key. Simulation results show that the proposed MADS can efficiently detect most quantum hacking attacks and revise the overestimated secret key rates caused by a CVQKD system without any defense strategy to obtain a tighter security bound.

Physical Review AJun 28, 202314 citations

Multi-Attack Detection: General Defense Strategy Based on Neural Networks for CV-QKD

Hongwei Du, Duan Huang

The security of the continuous-variable quantum key distribution (CVQKD) system is subject to various attacks by hackers. The traditional detection method of parameter estimation requires professionals to judge known attacks individually, so the general detection model emerges to improve the universality of detection; however, current universal detection methods only consider the independent existence of attacks but ignore the possible coexistence of multiple attacks in reality. Here, we propose two multi-attack neural network detection models to handle the coexistence of multiple attacks. The models adopt two methods in multi-label learning: binary relevance (BR) and label power (LP) to deal with the coexistence of multiple attacks and can identify attacks in real-time by autonomously learning the features of known attacks in a deep neural network. Further, we improve the model to detect unknown attacks simultaneously. The experimental results show that the proposed scheme can achieve high-precision detection for most known and unknown attacks without reducing the key rate and maximum transmission distance.

PhotonicsMar 12, 202211 citations

Attack detection scheme for continuous variable quantum key distribution based on a graph neural network

Di Jin, Wenqi Jiang, Ying Guo +2 more

The practical security of a continuous-variable quantum key distribution (CV-QKD) system is vulnerable to various attack strategies due to the significant difference between the idealized theoretical model and the practical physical system. The existing countermeasures against these attacks involve exploiting different real-time monitoring modules, which presents a challenge in effectively classifying attacks. We investigate a graph neural network (GNN)-based attack detection scheme for CV-QKD, which models data as a graph structure using three different methods for various conditions. Particularly, one of the proposed methods requires no additional devices and can detect attacks with over 99% accuracy. The algorithm can be expanded to different scenarios without additional training and can achieve a detection efficiency of more than 95%. Furthermore, our proposed scheme incorporates anomaly detection algorithms into the detection module, enabling 85% effective detection of partially unknown attacks with minimal security data.

Journal of the Optical Society of America BMay 3, 20245 citations

General multi-attack detection for continuous-variable quantum key distribution with local local oscillator

Zhuo 茁 Kang 康, Wei-Qi 维琪 Liu 刘, Jin 锦 Qi 齐 +1 more

Continuous-variable quantum key distribution with a local local oscillator (LLO CVQKD) has been extensively researched due to its simplicity and security. For practical security of an LLO CVQKD system, there are two main attack modes referred to as reference pulse attack and polarization attack presently. However, there is currently no general defense strategy against such attacks, and the security of the system needs further investigation. Here, we employ a deep learning framework called generative adversarial networks (GANs) to detect both attacks. We first analyze the data in different cases, derive a feature vector as input to a GAN model, and then show the training and testing process of the GAN model for attack classification. The proposed model has two parts, a discriminator and a generator, both of which employ a convolutional neural network (CNN) to improve accuracy. Simulation results show that the proposed scheme can detect and classify attacks without reducing the secret key rate and the maximum transmission distance. It only establishes a detection model by monitoring features of the pulse without adding additional devices.

Chinese Physics BFeb 22, 20242 citations

Detecting practical quantum attacks for continuous-variable quantum key distribution using density-based spatial clustering of applications with noise

Qin Liao, Zheng Wang, Haijie Liu +2 more

Continuous-variable quantum key distribution (CVQKD) has been proven to be secure theoretically. However, the practical CVQKD system may still be subject to various quantum attacks due to the imperfections of devices. In this paper, we suggest a general machine learning-based defense strategy against practical quantum attacks by taking advantage of density-based spatial clustering of applications with noise (DBSCAN), which we called DBSCAN-based attack detection scheme (DADS). Specifically, we first construct a set of features that can well reflect the behaviors of different attacks, then DBSCAN is applied to obtain several clusters. This clustering result can explicitly indicate whether the CVQKD system is being eavesdropped or not. Simulation experiments show that the proposed DADS cannot only detect most of known attacks, but also has ability to identify various unknown attacks, thereby improving practical security of the CVQKD system. We also show that the overestimated secret key rate caused by ignoring practical quantum attacks can be amended by DADS so that a reasonable tighter secure bound of the practical CVQKD system can be obtained.

Physical Review AAug 9, 202220 citations

Artificial key fingerprints for continuous-variable quantum key distribution

Yan Yao, Duan Huang, Pengzhi Yin +4 more

With rapid progress and significant successes in quantum hacking attacks, machine learning is being applied in continuous-variable quantum key distribution (CVQKD) systems. However, most machine-learning networks are shown to be vulnerable to adversarial examples. Thus, we propose a defense scheme with artificial key fingerprints for CVQKD systems. We first embed artificial key fingerprints into quadrature values, then exploit changes of fingerprints in the communication process to probe whether the samples have been manipulated. The paper verifies the effectiveness of our proposal based on four groups of samples that consist of normal measurement values and abnormal measurement values under four attacks. Simulation results show that the model can monitor sample changes in real time with high precision, and our scheme stays robust against adversarial examples attack. This proposal provides a different idea to address the potential vulnerability between machine-learning models used in CVQKD systems and their possible attacked training and test data by adversarial examples.

Physical Review AJul 5, 20233 citations