The increasing sophistication of malware poses significant challenges to modern machine learning (ML) based detection systems. This has motivated growing interest in quantum and hybrid quantum-classical ML models as alternatives to improve representational efficiency and robustness. However, high sensitivity to quantum noise and limited scalability raises question on the deployment of Quantum Machine Learning (QML) models on Noisy Intermediate-Scale Quantum (NISQ) devices. To address these challenges, we propose QSLP (Quantum model with Secure Latent-space and Pixel space), a unified hybrid quantum-classical architecture for image-based malware detection that integrates robustness at both latent-space and pixel-space. QSLP integrates a novel defense mechanism, i.e., Quantum Noise Injection Class Center Perturbation (QNI-CCP) to add sensitivity-weighted perturbations into the latent space prior to the quantum circuit execution. We investigate the quantum advantage, latent-space robustness, and adversarial resilience of QSLP. Our experiments with different datasets show that integrating QNI-CCP into classical neural network (CNN) and quantum neural network (QNN) pipelines improves both generalization performance and adversarial robustness at the latent space level. Complementing this latent-space defense, adversarial training in QSLP further strengthens the model against pixel-level perturbations.
The increasing sophistication of malware poses significant challenges to modern machine learning (ML) based detection systems. This has motivated growing interest in quantum and hybrid quantum-classical ML models as alternatives to improve representational efficiency and robustness. However, high sensitivity to quantum noise and limited scalability raises question on the deployment of Quantum Machine Learning (QML) models on Noisy Intermediate-Scale Quantum (NISQ) devices. To address these challenges, we propose QSLP (Quantum model with Secure Latent-space and Pixel space), a unified hybrid quantum-classical architecture for image-based malware detection that integrates robustness at both latent-space and pixel-space. QSLP integrates a novel defense mechanism, i.e., Quantum Noise Injection Class Center Perturbation (QNI-CCP) to add sensitivity-weighted perturbations into the latent space prior to the quantum circuit execution. We investigate the quantum advantage, latent-space robustness, and adversarial resilience of QSLP. Our experiments with different datasets show that integrating QNI-CCP into classical neural network (CNN) and quantum neural network (QNN) pipelines improves both generalization performance and adversarial robustness at the latent space level. Complementing this latent-space defense, adversarial training in QSLP further strengthens the model against pixel-level perturbations.
Quantum Machine Learning (QML) fuses quantum computing with machine learning to address complex tasks with potential speedups over classical methods. While QML models such as variational quantum classifiers (QVC), quantum multilayer perceptron(QMLP) models and quantum convolutional neural networks (QCNN) have demonstrated promise in applications like image recognition and malware classification, they remain vulnerable to adversarial threats. Inspired by the vulnerabilities in classical ML, this work systematically investigates how attacks-ranging from training-time poisoning and inferencetime evasion (e.g., quantum versions of FGSM and PGD) to deployment-time trigger attacks-manifest in quantum circuits. We explore how classical adversarial strategies adapt to quantum models through parameterized encodings, hybrid architectures, and probabilistic outputs. The poster evaluates different quantum classifiers under adversarial settings, comparing their robustness, trainability, and resilience to perturbations. Defense mechanisms such as randomized encoding, engineered noise channels, and quantum adversarial training are analyzed in relation to specific threat types. In addition, we assess how quantum models behave differently than classical counterparts under attack, and how quantum-specific design constraints can either exacerbate or mitigate these effects. Our ultimate goal is to define and construct robust QML systems that are both theoretically sound and practically secure. By synthesizing results across multiple QML architectures and threat models, this work provides actionable insight into the development of resilient quantum classifiers, paving the way toward trustworthy and scalable quantum machine learning.
Deep neural networks remain highly vulnerable to adversarial perturbations, limiting their reliability in security- and safety-critical applications. To address this challenge, we introduce QShield, a modular hybrid quantum-classical neural network (HQCNN) architecture designed to enhance the adversarial robustness of classical deep learning models. QShield integrates a conventional convolutional neural network (CNN) backbone for feature extraction with a quantum processing module that encodes the extracted features into quantum states, applies structured entanglement operations under realistic noise models, and outputs a hybrid prediction through a dynamically weighted fusion mechanism implemented via a lightweight multilayer perceptron (MLP). We systematically evaluate both classical and hybrid quantum-classical models on the MNIST, OrganAMNIST, and CIFAR-10 datasets, using a comprehensive set of robustness, efficiency, and computational performance metrics. Our results demonstrate that classical models are highly vulnerable to adversarial attacks, whereas the proposed hybrid models with entanglement patterns maintain high predictive accuracy while substantially reducing attack success rates across a wide range of adversarial attacks. Furthermore, the proposed hybrid architecture significantly increased the computational cost required to generate adversarial examples, thereby introducing an additional layer of defense. These findings indicate that the proposed modular hybrid architecture achieves a practical balance between predictive accuracy and adversarial robustness, positioning it as a promising approach for secure and reliable machine learning in sensitive and safety-critical applications.
The rapid expansion of the Internet of Things in critical industrial environments has significantly increased the attack surface, exposing systems to sophisticated cyber threats. Traditional pattern-based intrusion detection systems struggle to detect such advanced attacks, while deep learning approaches, despite achieving high detection accuracy, often suffer from high computational cost and latency, limiting their deployment in resource-constrained edge gateways. Quantum machine learning offers a promising alternative by enabling high-dimensional feature representation; however, current implementations are constrained by hardware noise, limited qubit availability and backend-dependent execution characteristics in the Noisy Intermediate-Scale Quantum era. To address these challenges, this paper proposes a Residual Hybrid Quantum-Classical Neural Network (RHQ-CNN) for efficient intrusion detection in Edge-Industrial Internet of Things (Edge-IIoT) environments under idealized quantum simulation conditions. The proposed framework employs a classical neural network encoder to compress high-dimensional network traffic into a compact latent representation suitable for quantum processing. A variational quantum circuit with serial data re-uploading is then utilised to model complex non-linear decision boundaries without increasing qubit requirements. In addition, a residual connection fuses classical and quantum representations to improve training stability and preserve latent feature information. The model is evaluated on the Edge-IIoTset dataset and achieves a test accuracy of 99.94%, with high weighted performance across the 15-class detection task, although the extremely low-sample Fingerprinting class remains comparatively more challenging. Additional controlled ablation, deployment-cost, and bootstrap confidence interval analyses demonstrate the test-set metric stability and computational trade-offs of the proposed architecture. These findings highlight the potential of hybrid quantum-classical models for next-generation cybersecurity in industrial IoT systems.
Machine learning (ML) methods such as artificial neural networks are rapidly becoming ubiquitous in modern science, technology, and industry. Despite their accuracy and sophistication, neural networks can be easily fooled by carefully designed malicious inputs known as adversarial attacks. While such vulnerabilities remain a serious challenge for classical neural networks, the extent of their existence is not fully understood in the quantum ML setting. In this paper, we benchmark the robustness of quantum ML networks, such as quantum variational classifiers (QVC), at scale by performing rigorous training for both simple and complex image datasets and through a variety of high-end adversarial attacks. Our results show that QVCs offer a notably enhanced robustness against classical adversarial attacks by learning features, which are not detected by the classical neural networks, indicating a possible quantum advantage for ML tasks. Contrarily, and remarkably, the converse is not true, with attacks on quantum networks also capable of deceiving classical neural networks. By combining quantum and classical network outcomes, we propose an adversarial attack detection technology. Traditionally quantum advantage in ML systems has been sought through increased accuracy or algorithmic speed-up, but our study has revealed the potential for a kind of quantum advantage through superior robustness of ML models, whose practical realization will address serious security concerns and reliability issues of ML algorithms employed in a myriad of applications including autonomous vehicles, cybersecurity, and surveillance robotic systems.
The emergence of quantum computing introduces significant challenges to traditional cybersecurity mechanisms, requiring innovative approaches for post-quantum environments. The main purpose of the study is to design a Quantum-Enhanced Adversarial Defense (QEAD) framework that integrates Quantum Machine Learning (QML) with Adversarial Deep Learning (ADL) to detect both classical and quantum-level cyberattacks. The research utilizes a simulated dataset containing post-quantum attack vectors and evaluates three models: Classical Deep Learning (DL), Quantum ML, and the proposed Hybrid QEAD. The experimental results show that the Hybrid QEAD model achieves the highest detection accuracy (91.44%), outperforming Classical DL and Quantum ML in energy efficiency, with statistically significant improvements (ANOVA, p < 0.05). The quantum properties of superposition and entanglement enhance feature representation and parallel computation, resulting in faster and more accurate threat detection. To address current hardware limitations such as circuit depth and quantum noise, the framework explores practical mitigation strategies including zero-noise extrapolation (ZNE), probabilistic error cancellation (PEC), and noise-aware variational circuit training. Despite these constraints, QEAD demonstrates viable deployment potential in prequantum transition infrastructures. The findings establish QEAD as a scalable solution for post-quantum cybersecurity, with future applications in Quantum Blockchain, Federated Quantum Learning, and Quantum IoT Security.
The emergence of quantum computing introduces significant challenges to traditional cybersecurity mechanisms, requiring innovative approaches for post-quantum environments. The main purpose of the study is to design a Quantum-Enhanced Adversarial Defense (QEAD) framework that integrates Quantum Machine Learning (QML) with Adversarial Deep Learning (ADL) to detect both classical and quantum-level cyberattacks. The research utilizes a simulated dataset containing post-quantum attack vectors and evaluates three models: Classical Deep Learning (DL), Quantum ML, and the proposed Hybrid QEAD. The experimental results show that the Hybrid QEAD model achieves the highest detection accuracy (91.44%), outperforming Classical DL and Quantum ML in energy efficiency, with statistically significant improvements (ANOVA, p < 0.05). The quantum properties of superposition and entanglement enhance feature representation and parallel computation, resulting in faster and more accurate threat detection. To address current hardware limitations such as circuit depth and quantum noise, the framework explores practical mitigation strategies including zero-noise extrapolation (ZNE), probabilistic error cancellation (PEC), and noise-aware variational circuit training. Despite these constraints, QEAD demonstrates viable deployment potential in prequantum transition infrastructures. The findings establish QEAD as a scalable solution for post-quantum cybersecurity, with future applications in Quantum Blockchain, Federated Quantum Learning, and Quantum IoT Security.