A Simulation-Based Quantum-Synchronized Ephemeral Encryption Framework for QKD-Secured IoT Networks with Transformer-Based Cyber-Quantum Attack Detection
Mohammad Sameer Aloun, Ala’ S Mughaid, Bashar Khassawneh, Mahmoud AlJamal
This paper presents a simulation-based cyber-quantum Internet of Things (IoT) security framework for modeling, securing, and detecting attacks in QKD-secured IoT communication environments. The proposed framework integrates heterogeneous IoT traffic generation, gateway-assisted routing, edge processing, QKD key-pool management, Quantum-Synchronized Ephemeral Encryption (Q-SEE), cross-layer adversarial attack injection, and AI-based multiclass detection. Unlike conventional IoT intrusion datasets that mainly capture packet- or flow-level abnormalities, the generated dataset represents the joint behavior of IoT sessions, network delay, queue pressure, QKD state, key consumption, encryption-mode transitions, ciphertext metadata, and cyber-quantum risk. A Python/SimPy/NetworkX simulation was developed using 80 IoT devices, 3 gateways, 2 edge servers, 4 cyber-quantum control-plane nodes, and 1 adversarial orchestrator. The final simulation produced 46,351 records with 76 features covering normal traffic, five traditional IoT attacks, and six novel cyber-quantum attacks, including QKD key-pool starvation, QBER camouflage, false QKD-health injection, encryption downgrade induction, queue–key coupling, and multi-vector cyber-quantum orchestration. Q-SEE adaptively selects among QKD-OTP, QKD-synchronized AES-256 ephemeral mode, PQC fallback, degraded mode, and blocked mode according to QBER, secret key rate, key availability, device criticality, downgrade pressure, and risk. A leakage-aware Quantum-Aware Kolmogorov–Arnold Network (QKAN) was then trained using deployable cyber-quantum evidence. The final nonrisk QKAN achieved 98.79% test accuracy, 98.61% macro-F1, 98.85% weighted-F1, and 99.78% macro-AUC, demonstrating effective detection of traditional and cyber-quantum IoT attacks.
This paper presents a simulation-based cyber-quantum Internet of Things (IoT) security framework for modeling, securing, and detecting attacks in QKD-secured IoT communication environments. The proposed framework integrates heterogeneous IoT traffic generation, gateway-assisted routing, edge processing, QKD key-pool management, Quantum-Synchronized Ephemeral Encryption (Q-SEE), cross-layer adversarial attack injection, and AI-based multiclass detection. Unlike conventional IoT intrusion datasets that mainly capture packet- or flow-level abnormalities, the generated dataset represents the joint behavior of IoT sessions, network delay, queue pressure, QKD state, key consumption, encryption-mode transitions, ciphertext metadata, and cyber-quantum risk. A Python/SimPy/NetworkX simulation was developed using 80 IoT devices, 3 gateways, 2 edge servers, 4 cyber-quantum control-plane nodes, and 1 adversarial orchestrator. The final simulation produced 46,351 records with 76 features covering normal traffic, five traditional IoT attacks, and six novel cyber-quantum attacks, including QKD key-pool starvation, QBER camouflage, false QKD-health injection, encryption downgrade induction, queue–key coupling, and multi-vector cyber-quantum orchestration. Q-SEE adaptively selects among QKD-OTP, QKD-synchronized AES-256 ephemeral mode, PQC fallback, degraded mode, and blocked mode according to QBER, secret key rate, key availability, device criticality, downgrade pressure, and risk. A leakage-aware Quantum-Aware Kolmogorov–Arnold Network (QKAN) was then trained using deployable cyber-quantum evidence. The final nonrisk QKAN achieved 98.79% test accuracy, 98.61% macro-F1, 98.85% weighted-F1, and 99.78% macro-AUC, demonstrating effective detection of traditional and cyber-quantum IoT attacks.
Abstract The rapid expansion of Internet of Things (IoT) infrastructures has heightened their exposure to sophisticated adversaries, including those equipped with quantum capabilities. This work introduces a hybrid framework that integrates post-quantum cryptography (PQC), quantum key distribution (QKD), and quantum machine learning (QML) to deliver quantum-resilient anomaly detection. A novel PQC-IoT dataset is generated using real-time Raspberry Pi sensors, enriched with 30+ features spanning 12 traffic classes (9 attacks, 3 benign), and incorporating PQC-specific metadata such as encryption latency and ciphertext size. Security is enforced through Kyber-512 encryption and a BB84-based QKD channel, while anomaly detection is performed using a quantum support vector machine (qSVM). Experimental results show that qSVM consistently outperforms classical SVM and XGBoost by 4--7% in accuracy, precision, recall, and F1-score, achieving up to 97.6% accuracy with encryption overhead limited to 5--7%. The framework maintains a Quantum Bit Error Rate (QBER) below 11% under noise models, validating its robustness. To the best of our knowledge, this is the first reproducible benchmark that unifies PQC, QKD, and QML into a single pipeline, offering a practical pathway toward quantum-secure IoT anomaly detection.
The evolution of smart cities will contribute to an increase in the use of interconnected physical/digital ecosystems, and consequently, an increase in threat surface for the cyber threats against the protected data streams. With the emergence of quantum-based cyberthreats, this has increased the potential range of types of cyber-attacks on protected data and increased the use of quantum-based means of conducting cyber-attacks on protected data. This research proposal presents an Internet of Things (IoT) smart city framework founded on quantum-secure standards that were developed for next-generation IoT smart cities. The IoT Smart City Framework is comprised of four levels of architecture: a Quantum Backbone, a Key Management Level, an Edge Gateway Level, and an IoT Device Layer. Consequently, through the use of this architecture, the IoT Smart City Framework can protect the IoT Smart City Network from future cybercriminal attacks while providing assurance that the IoT Smart City Framework has been 'future-proofed.' By utilizing strategically deployed quantum nodes, the proposed solution performs QKD and frees devices with limited resources from needing to perform highly computationally intensive cryptography in order to secure encrypted communications, instead employing Lightweight Encryption Standards in conjunction with Symmetric Keys established via QKD. Using simulated quantum channels and urban IoT workloads, our experimental results yield secret key rates between 12 and 18 kilobits/sec (kbps) with a low quantum bit error rate (QBER) of 1.8% to 3.2%. Based on these experimental results, we conclude that the proposed hierarchical security architecture provides a resilient security framework for urban essential services, with negligible energy consumption.
In quantum communication era, where quantum computing capabilities can be used in cyber attacks, it is important that Internet of Things (IoT) devices, which have limited energy and computing power compared to central devices, can communicate securely with control devices. In our study, we performed a simulation based on two scenarios for quantum key distribution (QKD) with the absence and presence of attack between server and IoT device. Security of communication for IoT device is achieved by detecting the attacks on QKD process with a machine learning (ML) algorithm. Unlike traditional cyber security methods, the ML algorithm helped to detect attacks with 100% probability without interrupting the flow of information between the server and the IoT device. The proposed simulation can also be generalised for being suitable for other applications where quantum communications are used.
The increasing interconnection of smart-grid operational technology, industrial-edge services, and utility information systems creates a critical need for resilient and continuously monitored industrial cyber-physical communication. Although quantum key distribution (QKD) can strengthen session-key establishment for advanced metering infrastructure, distributed energy resources, substation automation, supervisory control, and utility-core services, practical QKD deployments remain vulnerable to implementation-level side-channel attacks that can compromise the cryptographic protection layer without directly targeting conventional network packets. This paper presents a QKD-secured industrial smart-grid cyber-physical system framework for simulating and detecting adaptive side-channel attacks. The proposed 36-node industrial communication architecture integrates AMI devices, DER controllers, PMU and substation automation components, industrial-edge gateways, QKD modules, key-management services, SCADA and utility-core servers, security-operation-center components, and adversarial access points. A 100,000-record cyber-quantum dataset is generated across 12 operating conditions comprising normal communication and 11 adaptive QKD side-channel attacks: detector blinding, time shift, wavelength switching, Trojan-horse probing, photon-number splitting, decoy-state spoofing, RNG bias, calibration manipulation, local-oscillator manipulation, synchronization spoofing, and combined adaptive quantum hacking. Each scenario introduces coupled primary and secondary perturbations across optical, detector, timing, synchronization, randomness, calibration, photon-statistical, leakage, key-generation, encryption, and industrial-network-performance features. To support intelligent industrial security monitoring, the proposed Quantum-aware Mamba–Kolmogorov–Arnold Network (Q-MambaKAN) organizes device, network, QKD, side-channel, encryption, and risk evidence into an ordered cyber-quantum representation processed through selective state-space learning, side-channel attention, nonlinear KAN mapping, adaptive fusion, and multi-task prediction heads. Results show that the QBER increases from 0.071 during normal operation to 0.426 under combined adaptive quantum hacking, while encryption success decreases from 98.1% to 0%. Q-MambaKAN achieves a 99.48% binary detection accuracy, a 99.70% binary F1-score, a 97.60% multiclass macro-F1, and a risk RMSE of 0.021.
The rapid expansion of the Internet of Things (IoT) has introduced unprecedented cybersecurity challenges, as traditional cryptographic methods struggle to provide both efficiency and quantum resistance in resource-constrained environments. This research introduces Adaptive Quantum Cryptography (AQC), a novel security framework that integrates Quantum Key Distribution (QKD), Post-Quantum Cryptography (PQC), Quantum Random Number Generators (QRNGs), and AI-driven dynamic adaptation to safeguard IoT networks against evolving cyber threats. Unlike classical encryption techniques such as RSA and ECC, which are vulnerable to quantum attacks, AQC leverages quantum mechanical principles—such as superposition, entanglement, and the no-cloning theorem—to ensure provably secure key exchange and data encryption. The proposed AQC system dynamically adjusts cryptographic protocols based on real-time network conditions, computational resources, and threat intelligence, optimizing security without imposing excessive overhead. Experimental evaluations demonstrate that AQC achieves a 70% improvement in key exchange efficiency, a 50% reduction in computational load, and a 95% resilience rate against quantum attacks compared to conventional encryption methods. Additionally, the integration of QRNGs enhances cryptographic key entropy, while AI-driven anomaly detection enables proactive threat mitigation. This framework is particularly suited for next-generation IoT applications, including smart grids, autonomous vehicles, and industrial automation, where security, scalability, and energy efficiency are critical. By combining quantum-resistant algorithms with adaptive security mechanisms, AQC provides forward secrecy, resistance to quantum adversaries, and robust authentication, ensuring long-term protection for IoT ecosystems in the post-quantum era. The findings underscore AQC’s potential as a foundational security architecture for future quantum-safe IoT networks.
Smart cities necessitate ultra-secure and scalable communication frameworks to manage billions of interconnected IoT devices, particularly in the face of the emerging quantum computing threats. This paper proposes the QESIF, a novel Quantum-Enhanced Secure IoT Framework that integrates Quantum Key Distribution (QKD) with classical IoT infrastructures via a hybrid protocol stack and a quantum-aware intrusion detection system (Q-IDS). The QESIF achieves high resilience against eavesdropping by monitoring quantum bit error rate (QBER) and leveraging entropy-weighted key generation. The simulation results, conducted using datasets TON IoT, Edge-IIoTset, and Bot-IoT, demonstrate the effectiveness of the QESIF. The framework records an average QBER of 0.0103 under clean channels and discards over 95% of the compromised keys in adversarial settings. It achieves Attack Detection Rates (ADRs) of 98.1%, 98.7%, and 98.3% across the three datasets, outperforming the baselines by 4–9%. Moreover, the QESIF delivers the lowest average latency of 20.3 ms and the highest throughput of 868 kbit/s in clean scenarios while maintaining energy efficiency with 13.4 mJ per session.