International Conference on Computing, Communication, Perception and Quantum Technology (CCPQT)

Adversarial Attacks Defense for Continuous Variable Quantum Key Distribution System Based on Diffusion Model

Keke Hu, Haiyang Hu, Li Ye, Duan Huang

Published Oct 25, 2024• 0 citations

Abstract

Deep learning is applied to continuous-variable quantum key distribution (CVQKD) systems for attack detection and classification. However, adversarial attacks can bypass these detection mechanisms, posing a significant threat. To address this, we introduce QuantumPure, a defense mechanism based on a diffusion model that purifies adversarial inputs. QuantumPure first introduces controlled noise to the adversarial data through a forward diffusion process, then applies a reverse sampling step to reconstruct clean data. This approach ensures that adversarial perturbations are neutralized while preserving the integrity of the quantum data. We demonstrate that QuantumPure enhances the robustness of CVQKD systems across a broad spectrum of adversarial attacks, encompassing both white-box and black-box scenarios while preserving high classification accuracy. Furthermore, the results demonstrate that our approach is resistant to unseen attack methods and greatly enhances the security of communication systems.

DOI: 10.1109/ccpqt64497.2024.00016

Related papers

Adversarial Perturbation Elimination with GAN Based Defense in Continuous-Variable Quantum Key Distribution Systems

Xun Tang, Pengzhi Yin, Zehao Zhou +1 more

Machine learning is being applied to continuous-variable quantum key distribution (CVQKD) systems as defense countermeasures for attack classification. However, recent studies have demonstrated that most of these detection networks are not immune to adversarial attacks. In this paper, we propose to implement typical adversarial attack strategies against the CVQKD system and introduce a generalized defense scheme. Adversarial attacks essentially generate data points located near decision boundaries that are linearized based on iterations of the classifier to lead to misclassification. Using the DeepFool attack as an example, we test it on four different CVQKD detection networks and demonstrate that an adversarial attack can fool most CVQKD detection networks. To solve this problem, we propose an improved adversarial perturbation elimination with a generative adversarial network (APE-GAN) scheme to generate samples with similar distribution to the original samples to defend against adversarial attacks. The results show that the proposed scheme can effectively defend against adversarial attacks including DeepFool and other adversarial attacks and significantly improve the security of communication systems.

ElectronicsMay 27, 202311 citations

Adversarial Attack Defense Method for a Continuous-Variable Quantum Key Distribution System Based on Kernel Robust Manifold Non-Negative Matrix Factorization

Yuwen Fu, E Xia, Duan Huang +1 more

Machine learning has been applied in continuous-variable quantum key distribution (CVQKD) systems to address the growing threat of quantum hacking attacks. However, the use of machine learning algorithms for detecting these attacks has uncovered a vulnerability to adversarial disturbances that can compromise security. By subtly perturbing the detection networks used in CVQKD, significant misclassifications can occur. To address this issue, we utilize an adversarial sample defense method based on non-negative matrix factorization (NMF), considering the nonlinearity and high-dimensional nature of CVQKD data. Specifically, we employ the Kernel Robust Manifold Non-negative Matrix Factorization (KRMNMF) algorithm to reconstruct input samples, reducing the impact of adversarial perturbations. Firstly, we extract attack features against CVQKD by considering the adversary known as Eve. Then, we design an Artificial Neural Network (ANN) detection model to identify these attacks. Next, we introduce adversarial perturbations into the data generated by Eve. Finally, we use the KRMNMF decomposition to extract features from CVQKD data and mitigate the influence of adversarial perturbations through reconstruction. Experimental results demonstrate that the application of KRMNMF can effectively defend against adversarial attacks to a certain extent. The accuracy of KRMNMF surpasses the commonly used Comdefend method by 32.2% and the JPEG method by 30.8%. Moreover, it exhibits an improvement of 20.8% compared to NMF and outperforms other NMF-related algorithms in terms of classification accuracy. Moreover, it can complement other defense strategies, thus enhancing the overall defensive capabilities of CVQKD systems.

Applied SciencesSep 2, 202313 citations

Dictionary Learning Based Scheme for Adversarial Defense in Continuous-Variable Quantum Key Distribution

Shimiao Li, Pengzhi Yin, Zehao Zhou +3 more

There exist various attack strategies in continuous-variable quantum key distribution (CVQKD) system in practice. Due to the powerful information processing ability of neural networks, they are applied to the detection and classification of attack strategies in CVQKD systems. However, neural networks are vulnerable to adversarial attacks, resulting in the CVQKD system using neural networks also having security risks. To solve this problem, we propose a defense scheme for the CVQKD system. We first perform low-rank dimensionality reduction on the CVQKD system data through regularized self-representation-locality preserving projects (RSR-LPP) to filter out some adversarial disturbances, and then perform sparse coding reconstruction through dictionary learning to add data details and filter residual adversarial disturbances. We test the proposed defense algorithm in the CVQKD system. The results indicate that our proposed scheme has a good monitoring and alarm effect on CVQKD adversarial disturbances and has a better effect than other compared defense algorithms.

EntropyMar 14, 20235 citations

Denial-of-Service Attack Defense Strategy for Continuous Variable Quantum Key Distribution via Deep Learning

Wenhao Yin, Yuhan Zhou, Duan Huang

In the practical Continuous Variable Quantum Key Distribution (CVQKD) system, there is a large gap between the ideal theoretical model and the actual physical system. There are still some inevitable flaws, which give quantum hackers the opportunity to manipulate the channel in complex communication environments and launch Denial of Service attacks on the quantum channel. Therefore, a DoS attack-aware defense scheme for the CVQKD system based on convolutional neural networks (CNN) is proposed. The simulation results show that the proposed model can effectively detect DoS attacks launched by quantum hackers in CVQKD system in a complex communication environment, and the model has strong robustness due to the addition of the attention mechanism module. In addition, multiple sets of comparative experiments show that compared with the existing artificial neural network model, the CNN-based model has higher accuracy and stability.

MathematicsJun 13, 20235 citations

Defending Quantum Classifiers against Adversarial Perturbations through Quantum Autoencoders

Emma Andrews, Sahan Sanjaya, Prabhat Mishra

Machine learning models can learn from data samples to carry out various tasks efficiently. When data samples are adversarially manipulated, such as by insertion of carefully crafted noise, it can cause the model to make mistakes. Quantum machine learning models are also vulnerable to such adversarial attacks, especially in image classification using variational quantum classifiers. While there are promising defenses against these adversarial perturbations, such as training with adversarial samples, they face practical limitations. For example, they are not applicable in scenarios where training with adversarial samples is either not possible or can overfit the models on one type of attack. In this paper, we propose an adversarial training-free defense framework that utilizes a quantum autoencoder to purify the adversarial samples through reconstruction. Moreover, our defense framework provides a confidence metric to identify potentially adversarial samples that cannot be purified the quantum autoencoder. Extensive evaluation demonstrates that our defense framework can significantly outperform state-of-the-art in prediction accuracy (up to 68%) under adversarial attacks.

quant-pharXiv:2604.28176May 1, 20260 citations

Detecting quantum attacks: a machine learning based defense strategy for practical continuous-variable quantum key distribution

Yiyu Mao, Wenti Huang, Hai Zhong +4 more

Abstract The practical security of a continuous-variable quantum key distribution (CVQKD) system is compromised by various attack strategies. The existing countermeasures against these attacks are to exploit different real-time monitoring modules to prevent different types of attacks, which significantly depend on the accuracy of the estimated excess noise and lack a universal defense method. In this paper, we propose a defense strategy for CVQKD systems to address these disadvantages and resist most of the known attack types. We investigate several features of the pulses that would be affected by different types of attacks, derive a feature vector based on these features as the input of an artificial neural network (ANN) model, and show the training and testing process of the ANN model for attack detection and classification. Simulation results show that the proposed scheme can effectively detect most of the known attacks at the cost of reducing a small part of secret keys and transmission distance. It establishes a universal attack detection model by simply monitoring several features of the pulses without knowing the exact type of attack in advance.

New Journal of PhysicsJul 23, 202075 citations