This project presents a scoping review titled Adversarial Robustness in Quantum Machine Learning: A Scoping Review. The purpose of the study is to systematically map and synthesize empirical research on adversarial robustness in quantum machine learning (QML), an emerging field at the intersection of quantum computing and artificial intelligence. As QML systems move closer to real-world deployment, understanding their vulnerability to adversarial attacks and the effectiveness of proposed defenses becomes critical for ensuring reliability and security. Following the PRISMA-ScR framework, this review analyzes 53 empirical studies published between 2020 and 2026 across major databases including Scopus, ACM, IEEE Xplore, and MDPI. The study examines six key dimensions: (1) adversarial threat vectors investigated in QML, (2) QML model families evaluated under attack, (3) defense strategies proposed to enhance robustness, (4) robustness evaluation methods employed, (5) practical and technological constraints influencing research, and (6) future research directions identified in the literature. Expected outcomes include a structured taxonomy of adversarial threats in QML, a comparative mapping of defense mechanisms, identification of methodological gaps, and clarification of hardware and scalability constraints affecting robustness research. The review aims to provide a consolidated evidence base to guide future research, support the development of standardized benchmarking practices, and inform the design of more secure and scalable QML systems suitable for deployment in high-risk domains such as cybersecurity and healthcare.
This project presents a scoping review titled Adversarial Robustness in Quantum Machine Learning: A Scoping Review. The purpose of the study is to systematically map and synthesize empirical research on adversarial robustness in quantum machine learning (QML), an emerging field at the intersection of quantum computing and artificial intelligence. As QML systems move closer to real-world deployment, understanding their vulnerability to adversarial attacks and the effectiveness of proposed defenses becomes critical for ensuring reliability and security. Following the PRISMA-ScR framework, this review analyzes 53 empirical studies published between 2020 and 2026 across major databases including Scopus, ACM, IEEE Xplore, and MDPI. The study examines six key dimensions: (1) adversarial threat vectors investigated in QML, (2) QML model families evaluated under attack, (3) defense strategies proposed to enhance robustness, (4) robustness evaluation methods employed, (5) practical and technological constraints influencing research, and (6) future research directions identified in the literature. Expected outcomes include a structured taxonomy of adversarial threats in QML, a comparative mapping of defense mechanisms, identification of methodological gaps, and clarification of hardware and scalability constraints affecting robustness research. The review aims to provide a consolidated evidence base to guide future research, support the development of standardized benchmarking practices, and inform the design of more secure and scalable QML systems suitable for deployment in high-risk domains such as cybersecurity and healthcare.
Quantum machine learning (QML) is emerging as a promising paradigm at the intersection of quantum computing and artificial intelligence, yet its security under adversarial conditions remains insufficiently understood. This scoping review aims to systematically map empirical research on adversarial robustness in QML and to identify dominant threat models, defense strategies, evaluation approaches, practical constraints, and future research directions. Following PRISMA-ScR guidelines, four major databases were searched, resulting in 53 eligible empirical studies published between 2020 and 2026. The findings show that most research concentrates on input-level evasion attacks, particularly adversarial examples, and primarily evaluates robustness in classification-oriented models such as variational quantum circuits and quantum neural networks. Defense strategies are largely adapted from classical adversarial training and noise-based mitigation, with limited deployment on real quantum hardware. Robustness assessment is predominantly empirical, relying on accuracy degradation and attack success rate, while formal certification methods remain less common. The literature also highlights substantial constraints related to hardware limitations, NISQ noise, computational cost, and dataset scale. Overall, the evidence indicates that adversarial robustness research in QML is expanding but remains methodologically concentrated, underscoring the need for standardized benchmarking, scalable defenses, and hardware-validated robustness evaluation frameworks.
With the rapid advancement of artificial intelligence (AI) and quantum computing, cybersecurity threats have evolved, giving rise to adversarial quantum attacks. These attacks exploit the vulnerabilities of AI models using quantum algorithms, posing a significant risk to data security, model robustness, and decision-making systems. This paper presents a comprehensive review of adversarial quantum attacks on AI, analyzing their mechanisms, potential impacts, and countermeasures. It explores how quantum computing can enhance adversarial attacks by accelerating the generation of adversarial examples, breaking cryptographic protections, and undermining AI model integrity. Additionally, the study examines different attack vectors, including quantum-enhanced adversarial perturbations, quantum machine learning (QML) vulnerabilities, and quantum decryption threats. The paper also discusses defensive strategies such as quantum-resistant AI models, quantum cryptographic defenses, and hybrid quantum-classical security frameworks that can mitigate these risks. By evaluating existing research and emerging trends, this review provides insights into the growing intersection of AI security and quantum computing. The findings emphasize the urgent need for robust quantum-aware AI security frameworks to safeguard AI-driven systems in the quantum era. Future research directions include developing quantum-adaptive AI models, post-quantum cryptographic techniques, and real-world applications of quantum-safe AI architectures. This review aims to contribute to the ongoing discourse on ensuring AI resilience against adversarial quantum threats, paving the way for a secure and quantum-resistant future.
Artificial Intelligence has achieved remarkable success across diverse application domains. However, its vulnerability to adversarial attacks poses significant challenges to reliability, security, and trustworthiness. Adversarial machine learning demonstrates that even highly accurate models can be manipulated through carefully crafted perturbations, raising serious concerns in safety critical systems such as healthcare, finance, and autonomous technologies. In parallel, quantum computing has emerged as a transformative paradigm capable of addressing complex computational problems through principles such as superposition, entanglement, and quantum interference. The convergence of these fields has led to the emergence of quantum artificial intelligence, which explores how quantum techniques can enhance learning efficiency, scalability, and robustness. This chapter provides a comprehensive overview of adversarial machine learning and existing defense strategies, followed by an accessible introduction to quantum computing and quantum machine learning models. It further presents conceptual frameworks for quantum-enhanced adversarial robustness, emphasizing quantum optimization, feature mapping, and hybrid quantum classical architectures. Practical applications, key challenges, and future research directions are also discussed to support the development of secure and trustworthy AI systems.
Quantum Machine Learning (QML) fuses quantum computing with machine learning to address complex tasks with potential speedups over classical methods. While QML models such as variational quantum classifiers (QVC), quantum multilayer perceptron(QMLP) models and quantum convolutional neural networks (QCNN) have demonstrated promise in applications like image recognition and malware classification, they remain vulnerable to adversarial threats. Inspired by the vulnerabilities in classical ML, this work systematically investigates how attacks-ranging from training-time poisoning and inferencetime evasion (e.g., quantum versions of FGSM and PGD) to deployment-time trigger attacks-manifest in quantum circuits. We explore how classical adversarial strategies adapt to quantum models through parameterized encodings, hybrid architectures, and probabilistic outputs. The poster evaluates different quantum classifiers under adversarial settings, comparing their robustness, trainability, and resilience to perturbations. Defense mechanisms such as randomized encoding, engineered noise channels, and quantum adversarial training are analyzed in relation to specific threat types. In addition, we assess how quantum models behave differently than classical counterparts under attack, and how quantum-specific design constraints can either exacerbate or mitigate these effects. Our ultimate goal is to define and construct robust QML systems that are both theoretically sound and practically secure. By synthesizing results across multiple QML architectures and threat models, this work provides actionable insight into the development of resilient quantum classifiers, paving the way toward trustworthy and scalable quantum machine learning.
Quantum Machine Learning (QML) has emerged as a promising paradigm that combines the power of quantum computing with the adaptability of machine learning. QML models have demonstrated potential advantages in solving complex problems across domains such as optimization, pattern recognition, and generative modeling. While much attention has been devoted to exploring their computational benefits and capabilities, the security of QML models and their robustness to adversarial attacks remains an underexplored area in the literature. Understanding adversarial vulnerabilities is critical for assessing the reliability of QML systems, especially as they transition from theoretical constructs to practical applications. In this work, we present an empirical study on the adversarial robustness of QML models. We systematically evaluate the susceptibility of quantum models to adversarial attacks, comparing them with classical counterparts across different settings. Additionally, we examine cross-paradigm attack transferability by testing classical attacks on quantum models and vice versa. Our results indicate that QML models exhibit higher vulnerability in white-box settings and stronger attack transferability than classical ML models. Furthermore, while adversarial training can provide some robustness, its effectiveness remains limited. Our findings contribute to a better understanding of QML security and provide insights into the challenges of building robust QML systems.
Quantum Machine Learning (QML) has become an important research area in recent years due to its potential to overcome the computational bottlenecks faced by classical machine learning methods. In this study, only SCI/SCI-Expanded journal articles published between 2023 and 2025 and accepted as early access for 2026 are considered, and 30 such articles are systematically examined to provide a comprehensive assessment of the current state of QML methods. The reviewed literature covers variational quantum circuits, quantum kernel methods, hybrid quantum–classical models, quantum annealing approaches, federated QML architectures, data encoding strategies, and adversarial robustness analyses. The findings indicate that QML models can exhibit stronger representational capacity and higher generalization performance compared to classical methods, particularly on high-dimensional, noisy, or small sample datasets. Reported results in domains such as healthcare, chemistry, energy systems, cybersecurity, blockchain, and finance reveal the diversity of QML applications and its interdisciplinary potential. Nevertheless, the limited qubit capacity of current NISQ hardware, constraints on circuit depth, and noise-related issues remain fundamental factors that restrict the scalability of QML models. This study synthesizes methodological trends, identifies open research problems, and proposes a directional roadmap for future QML research focused on hardware-aware circuit design, efficient data encoding schemes, and robust learning frameworks.