Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Physical Review A

Machine-learning-based detection for quantum hacking attacks on continuous-variable quantum-key-distribution systems

Chao Ding, Shi Wang, Yaonan Wang, Zijie Wu, Jingtao Sun, Yiyu Mao

Published Jun 28, 2023• 14 citations
Publisher

Abstract

Continuous-variable quantum key distribution (CVQKD) is a mature technology that can theoretically provide an unconditional security guarantee. However, a practical CVQKD system may be vulnerable to various quantum hacking attacks due to imperfect devices and insufficient assumptions. In this paper, we propose a universal defense strategy called a machine-learning-based attack detection scheme (MADS). Leveraging the combined advantages of density-based spatial clustering of applications with noise (DBSCAN) and multiclass support vector machines (MCSVMs), MADS demonstrates remarkable effectiveness in detecting quantum hacking attacks. Specifically, we first establish a set of attack-related features to extract feature vectors. These vectors are then utilized as input data for DBSCAN to identify and remove any noise or outliers. Finally, the trained MCSVMs are employed to classify and predict the processed data. The predicted results can immediately determine whether or not to generate a final secret key. Simulation results show that the proposed MADS can efficiently detect most quantum hacking attacks and revise the overestimated secret key rates caused by a CVQKD system without any defense strategy to obtain a tighter security bound.

DOI
10.1103/physreva.107.062422

Related papers

Detecting practical quantum attacks for continuous-variable quantum key distribution using density-based spatial clustering of applications with noise

Qin Liao, Zheng Wang, Haijie Liu +2 more

Continuous-variable quantum key distribution (CVQKD) has been proven to be secure theoretically. However, the practical CVQKD system may still be subject to various quantum attacks due to the imperfections of devices. In this paper, we suggest a general machine learning-based defense strategy against practical quantum attacks by taking advantage of density-based spatial clustering of applications with noise (DBSCAN), which we called DBSCAN-based attack detection scheme (DADS). Specifically, we first construct a set of features that can well reflect the behaviors of different attacks, then DBSCAN is applied to obtain several clusters. This clustering result can explicitly indicate whether the CVQKD system is being eavesdropped or not. Simulation experiments show that the proposed DADS cannot only detect most of known attacks, but also has ability to identify various unknown attacks, thereby improving practical security of the CVQKD system. We also show that the overestimated secret key rate caused by ignoring practical quantum attacks can be amended by DADS so that a reasonable tighter secure bound of the practical CVQKD system can be obtained.

Physical Review A•Aug 9, 2022•20 citations

Detecting quantum attacks: a machine learning based defense strategy for practical continuous-variable quantum key distribution

Yiyu Mao, Wenti Huang, Hai Zhong +4 more

Abstract The practical security of a continuous-variable quantum key distribution (CVQKD) system is compromised by various attack strategies. The existing countermeasures against these attacks are to exploit different real-time monitoring modules to prevent different types of attacks, which significantly depend on the accuracy of the estimated excess noise and lack a universal defense method. In this paper, we propose a defense strategy for CVQKD systems to address these disadvantages and resist most of the known attack types. We investigate several features of the pulses that would be affected by different types of attacks, derive a feature vector based on these features as the input of an artificial neural network (ANN) model, and show the training and testing process of the ANN model for attack detection and classification. Simulation results show that the proposed scheme can effectively detect most of the known attacks at the cost of reducing a small part of secret keys and transmission distance. It establishes a universal attack detection model by simply monitoring several features of the pulses without knowing the exact type of attack in advance.

New Journal of Physics•Jul 23, 2020•75 citations

Detecting Practical Attacks for Continuous-Variable Quantum Key Distribution Using Quantum k-Nearest Neighbor

Chan Liu, Junhao Li, Qin Liao

Continuous-variablequantum key distribution (CVQKD) enables information-theoretically secure communications between two legitimate users. However, practical CVQKD systems remain vulnerable to various attacks, while existing machine-learning-based detection schemes suffer from increasing computational complexity when processing large-scale monitoring data. In this paper, we propose a quantum k-nearest neighbor (QkNN)-based multiclass attack detection framework for CVQKD systems. Specifically, physical features extracted from Bob’s monitoring data are encoded into quantum states and subsequently classified using the QkNN algorithm to identify different attack behaviors. Furthermore, by incorporating the attack ratio, retained-data ratio, and attack detection performance into secret key rate analysis, an attack-aware secret key rate model is established to characterize the influence of practical attacks on key generation. Simulation results demonstrate that the proposed scheme achieves high attack classification accuracy while significantly reducing computational complexity. Moreover, the proposed framework establishes a direct connection between attack detection and secret key generation, enabling a more realistic security evaluation for practical CVQKD systems.

Information•Aug 9, 2026•0 citations

Secure Continuous-Variable Quantum Key Distribution with Machine Learning

Duan Huang, Susu Liu, Ling Zhang

Quantum key distribution (QKD) offers information-theoretical security, while real systems are thought not to promise practical security effectively. In the practical continuous-variable (CV) QKD system, the deviations between realistic devices and idealized models might introduce vulnerabilities for eavesdroppers and stressors for two parties. However, the common quantum hacking strategies and countermeasures inevitably increase the complexity of practical CV systems. Machine-learning techniques are utilized to explore how to perceive practical imperfections. Here, we review recent works on secure CVQKD systems with machine learning, where the methods for detections and attacks were studied.

Photonics•Nov 13, 2021•15 citations

Artificial key fingerprints for continuous-variable quantum key distribution

Yan Yao, Duan Huang, Pengzhi Yin +4 more

With rapid progress and significant successes in quantum hacking attacks, machine learning is being applied in continuous-variable quantum key distribution (CVQKD) systems. However, most machine-learning networks are shown to be vulnerable to adversarial examples. Thus, we propose a defense scheme with artificial key fingerprints for CVQKD systems. We first embed artificial key fingerprints into quadrature values, then exploit changes of fingerprints in the communication process to probe whether the samples have been manipulated. The paper verifies the effectiveness of our proposal based on four groups of samples that consist of normal measurement values and abnormal measurement values under four attacks. Simulation results show that the model can monitor sample changes in real time with high precision, and our scheme stays robust against adversarial examples attack. This proposal provides a different idea to address the potential vulnerability between machine-learning models used in CVQKD systems and their possible attacked training and test data by adversarial examples.

Physical Review A•Jul 5, 2023•3 citations

Noise-Resistant Feature-Aware Attack Detection Using Quantum Machine Learning

Chao Ding, Shi Wang, Jingtao Sun +3 more

Continuous-variable quantum key distribution (CV-QKD) is a quantum communication technology that offers an unconditional security guarantee. However, the practical deployment of CV-QKD systems remains vulnerable to various quantum attacks. In this paper, we propose a quantum machine learning (QML)-based attack detection framework (QML-ADF) that safeguards the security of high-rate CV-QKD systems. In particular, two alternative QML models -- quantum support vector machines (QSVM) and quantum neural networks (QNN) -- are developed to perform noise-resistant and feature-aware attack detection before conventional data postprocessing. Leveraging feature-rich quantum data from Gaussian modulation and homodyne detection, the QML-ADF effectively detects quantum attacks, including both known and unknown types defined by these distinctive features. The results indicate that all twelve distinct QML variants for both QSVM and QNN exhibit remarkable performance in detecting both known and previously undiscovered quantum attacks, with the best-performing QSVM variant outperforming the top QNN counterpart. Furthermore, we systematically evaluate the performance of the QML-ADF under various physically interpretable noise backends, demonstrating its strong robustness and superior detection performance. We anticipate that the QML-ADF will not only enable robust detection of quantum attacks under realistic deployment conditions but also strengthen the practical security of quantum communication systems.

quant-pharXiv:2601.06762•Jan 13, 2026•0 citations
Continuous-variable quantum key distribution (CVQKD) is a mature technology that can theoretically provide an unconditional security guarantee. However, a practical CVQKD system may be vulnerable to various quantum hacking attacks due to imperfect devices and insufficient assumptions. In this paper, we propose a universal defense strategy called a machine-learning-based attack detection scheme (MADS). Leveraging the combined advantages of density-based spatial clustering of applications with noise (DBSCAN) and multiclass support vector machines (MCSVMs), MADS demonstrates remarkable effectiveness in detecting quantum hacking attacks. Specifically, we first establish a set of attack-related features to extract feature vectors. These vectors are then utilized as input data for DBSCAN to identify and remove any noise or outliers. Finally, the trained MCSVMs are employed to classify and predict the processed data. The predicted results can immediately determine whether or not to generate a final secret key. Simulation results show that the proposed MADS can efficiently detect most quantum hacking attacks and revise the overestimated secret key rates caused by a CVQKD system without any defense strategy to obtain a tighter security bound.
Continuous-variable quantum key distribution (CVQKD) has been proven to be secure theoretically. However, the practical CVQKD system may still be subject to various quantum attacks due to the imperfections of devices. In this paper, we suggest a general machine learning-based defense strategy against practical quantum attacks by taking advantage of density-based spatial clustering of applications with noise (DBSCAN), which we called DBSCAN-based attack detection scheme (DADS). Specifically, we first construct a set of features that can well reflect the behaviors of different attacks, then DBSCAN is applied to obtain several clusters. This clustering result can explicitly indicate whether the CVQKD system is being eavesdropped or not. Simulation experiments show that the proposed DADS cannot only detect most of known attacks, but also has ability to identify various unknown attacks, thereby improving practical security of the CVQKD system. We also show that the overestimated secret key rate caused by ignoring practical quantum attacks can be amended by DADS so that a reasonable tighter secure bound of the practical CVQKD system can be obtained.
Abstract The practical security of a continuous-variable quantum key distribution (CVQKD) system is compromised by various attack strategies. The existing countermeasures against these attacks are to exploit different real-time monitoring modules to prevent different types of attacks, which significantly depend on the accuracy of the estimated excess noise and lack a universal defense method. In this paper, we propose a defense strategy for CVQKD systems to address these disadvantages and resist most of the known attack types. We investigate several features of the pulses that would be affected by different types of attacks, derive a feature vector based on these features as the input of an artificial neural network (ANN) model, and show the training and testing process of the ANN model for attack detection and classification. Simulation results show that the proposed scheme can effectively detect most of the known attacks at the cost of reducing a small part of secret keys and transmission distance. It establishes a universal attack detection model by simply monitoring several features of the pulses without knowing the exact type of attack in advance.
Continuous-variablequantum key distribution (CVQKD) enables information-theoretically secure communications between two legitimate users. However, practical CVQKD systems remain vulnerable to various attacks, while existing machine-learning-based detection schemes suffer from increasing computational complexity when processing large-scale monitoring data. In this paper, we propose a quantum k-nearest neighbor (QkNN)-based multiclass attack detection framework for CVQKD systems. Specifically, physical features extracted from Bob’s monitoring data are encoded into quantum states and subsequently classified using the QkNN algorithm to identify different attack behaviors. Furthermore, by incorporating the attack ratio, retained-data ratio, and attack detection performance into secret key rate analysis, an attack-aware secret key rate model is established to characterize the influence of practical attacks on key generation. Simulation results demonstrate that the proposed scheme achieves high attack classification accuracy while significantly reducing computational complexity. Moreover, the proposed framework establishes a direct connection between attack detection and secret key generation, enabling a more realistic security evaluation for practical CVQKD systems.
Quantum key distribution (QKD) offers information-theoretical security, while real systems are thought not to promise practical security effectively. In the practical continuous-variable (CV) QKD system, the deviations between realistic devices and idealized models might introduce vulnerabilities for eavesdroppers and stressors for two parties. However, the common quantum hacking strategies and countermeasures inevitably increase the complexity of practical CV systems. Machine-learning techniques are utilized to explore how to perceive practical imperfections. Here, we review recent works on secure CVQKD systems with machine learning, where the methods for detections and attacks were studied.
With rapid progress and significant successes in quantum hacking attacks, machine learning is being applied in continuous-variable quantum key distribution (CVQKD) systems. However, most machine-learning networks are shown to be vulnerable to adversarial examples. Thus, we propose a defense scheme with artificial key fingerprints for CVQKD systems. We first embed artificial key fingerprints into quadrature values, then exploit changes of fingerprints in the communication process to probe whether the samples have been manipulated. The paper verifies the effectiveness of our proposal based on four groups of samples that consist of normal measurement values and abnormal measurement values under four attacks. Simulation results show that the model can monitor sample changes in real time with high precision, and our scheme stays robust against adversarial examples attack. This proposal provides a different idea to address the potential vulnerability between machine-learning models used in CVQKD systems and their possible attacked training and test data by adversarial examples.
Continuous-variable quantum key distribution (CV-QKD) is a quantum communication technology that offers an unconditional security guarantee. However, the practical deployment of CV-QKD systems remains vulnerable to various quantum attacks. In this paper, we propose a quantum machine learning (QML)-based attack detection framework (QML-ADF) that safeguards the security of high-rate CV-QKD systems. In particular, two alternative QML models -- quantum support vector machines (QSVM) and quantum neural networks (QNN) -- are developed to perform noise-resistant and feature-aware attack detection before conventional data postprocessing. Leveraging feature-rich quantum data from Gaussian modulation and homodyne detection, the QML-ADF effectively detects quantum attacks, including both known and unknown types defined by these distinctive features. The results indicate that all twelve distinct QML variants for both QSVM and QNN exhibit remarkable performance in detecting both known and previously undiscovered quantum attacks, with the best-performing QSVM variant outperforming the top QNN counterpart. Furthermore, we systematically evaluate the performance of the QML-ADF under various physically interpretable noise backends, demonstrating its strong robustness and superior detection performance. We anticipate that the QML-ADF will not only enable robust detection of quantum attacks under realistic deployment conditions but also strengthen the practical security of quantum communication systems.