{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T04:16:53Z","timestamp":1775881013955,"version":"3.50.1"},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2024,11,19]],"date-time":"2024-11-19T00:00:00Z","timestamp":1731974400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,11,19]],"date-time":"2024-11-19T00:00:00Z","timestamp":1731974400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Fraunhofer-Institut f\u00fcr Kognitive Systeme IKS"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Quantum Mach. Intell."],"published-print":{"date-parts":[[2024,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Leveraging the unique properties of quantum mechanics, quantum machine learning (QML) promises computational breakthroughs and enriched perspectives where traditional systems reach their boundaries. However, similarly to classical machine learning, QML is not immune to adversarial attacks. Quantum adversarial machine learning has become instrumental in highlighting the weak points of QML models when faced with adversarial crafted feature vectors. Diving deep into this domain, our exploration shines a light on the interplay between depolarization noise and adversarial robustness. While previous results enhanced robustness from adversarial threats through depolarization noise, our findings paint a different picture. Interestingly, adding depolarization noise discontinued the effect of providing further robustness for a multi-class classification scenario. Consolidating our findings, we conducted experiments with a multi-class classifier adversarially trained on gate-based quantum simulators, further elucidating this unexpected behavior.<\/jats:p>","DOI":"10.1007\/s42484-024-00208-6","type":"journal-article","created":{"date-parts":[[2024,11,19]],"date-time":"2024-11-19T05:54:32Z","timestamp":1731995672000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["Quantum neural networks under depolarization noise: exploring white-box attacks and defenses"],"prefix":"10.1007","volume":"6","author":[{"given":"David","family":"Winderl","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicola","family":"Franco","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeanette Miriam","family":"Lorenz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,11,19]]},"reference":[{"key":"208_CR1","unstructured":"Berberich J, Fink D, Pranji\u0107 D, Tutschku C, Holm C (2023) Training robust and generalizable quantum models"},{"key":"208_CR2","unstructured":"Bergholm V, Izaac J, Schuld M, Gogolin C, Ahmed S, Ajith V, Alam MS, Alonso-Linaje G, AkashNarayanan B, Asadi A, Arrazola JM, Azad U, Banning S, Blank C, Bromley TR, Cordier BA, Ceroni J, Delgado A, Di Matteo O, Dusko A, Garg T, Guala D, Hayes A, Hill R, et\u00a0al (2022) Pennylane: automatic differentiation of hybrid quantum-classical computations"},{"issue":"7671","key":"208_CR3","doi-asserted-by":"publisher","first-page":"195","DOI":"10.1038\/nature23474","volume":"549","author":"J Biamonte","year":"2017","unstructured":"Biamonte J, Wittek P, Pancotti N, Rebentrost P, Wiebe N, Lloyd S (2017) Quantum machine learning. Nature 549(7671):195\u2013202","journal-title":"Nature"},{"key":"208_CR4","doi-asserted-by":"crossref","unstructured":"Biggio B, Corona I, Maiorca D, Nelson B, \u0160rndi\u0107 N, Laskov P, Giacinto G, Roli F (2013) Evasion attacks against machine learning at test time. In: Machine learning and knowledge discovery in databases: European conference, ECML PKDD 2013, Prague, Czech Republic, September 23-27, 2013, Proceedings, Part III 13, pp 387\u2013402. Springer","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"208_CR5","unstructured":"Bischl B, Casalicchio G, Feurer M, Gijsbers P, Hutter F, Lang M, Mantovani RG, van Rijn JN, Vanschoren J (2021) Openml benchmarking suites"},{"issue":"9","key":"208_CR6","doi-asserted-by":"publisher","first-page":"625","DOI":"10.1038\/s42254-021-00348-9","volume":"3","author":"M Cerezo","year":"2021","unstructured":"Cerezo M, Arrasmith A, Babbush R, Benjamin SC, Endo S, Fujii K, McClean JR, Mitarai K, Yuan X, Cincio L et al (2021) Variational quantum algorithms. Nat Rev Phys 3(9):625\u2013644","journal-title":"Variational quantum algorithms. Nat Rev Phys"},{"key":"208_CR7","doi-asserted-by":"publisher","unstructured":"Chang V, Bailey J, Xu QA, Sun Z (2023) Pima Indians diabetes mellitus classification based on machine learning (ml) algorithms. https:\/\/doi.org\/10.1007\/s00521-022-07049-z","DOI":"10.1007\/s00521-022-07049-z"},{"issue":"12","key":"208_CR8","doi-asserted-by":"publisher","first-page":"1273","DOI":"10.1038\/s41567-019-0648-8","volume":"15","author":"I Cong","year":"2019","unstructured":"Cong I, Choi S, Lukin MD (2019) Quantum convolutional neural networks. Nat Phys 15(12):1273\u20131278. https:\/\/doi.org\/10.1038\/s41567-019-0648-8","journal-title":"Nat Phys"},{"key":"208_CR9","doi-asserted-by":"publisher","unstructured":"Du Y, Hsieh MH, Liu T, Tao D, Liu N (2021) Quantum noise protects quantum classifiers against adversaries. Phys Rev Res 3(2). https:\/\/doi.org\/10.1103\/physrevresearch.3.023153","DOI":"10.1103\/physrevresearch.3.023153"},{"key":"208_CR10","doi-asserted-by":"crossref","unstructured":"Egginger S, Sakhnenko A, Lorenz JM (2023) A hyperparameter study for quantum kernel methods","DOI":"10.1007\/s42484-024-00172-1"},{"key":"208_CR11","unstructured":"Gong W, Yuan D, Li W, Deng DL (2022) Enhancing quantum adversarial robustness by randomized encodings. arXiv:2212.02531"},{"key":"208_CR12","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2015) Explaining and harnessing adversarial examples"},{"key":"208_CR13","doi-asserted-by":"crossref","unstructured":"Grover LK (1996) A fast quantum mechanical algorithm for database search. In: Proceedings of the twenty-eighth annual ACM symposium on theory of computing, pp 212\u2013219","DOI":"10.1145\/237814.237866"},{"issue":"15","key":"208_CR14","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevLett.103.150502","volume":"103","author":"AW Harrow","year":"2009","unstructured":"Harrow AW, Hassidim A, Lloyd S (2009) Quantum algorithm for linear systems of equations. Phys Rev Lett 103(15):150502","journal-title":"Phys Rev Lett"},{"key":"208_CR15","doi-asserted-by":"crossref","unstructured":"Huang JC, Tsai YL, Yang CH, Su CF, Yu CM, Chen PY, Kuo SY (2023) Certified robustness of quantum classifiers against adversarial examples through quantum noise","DOI":"10.1109\/ICASSP49357.2023.10095030"},{"issue":"2","key":"208_CR16","doi-asserted-by":"publisher","first-page":"024001","DOI":"10.1088\/2058-9565\/aaea94","volume":"4","author":"W Huggins","year":"2019","unstructured":"Huggins W, Patil P, Mitchell B, Whaley KB, Stoudenmire EM (2019) Towards quantum machine learning with tensor networks. Quantum Sci Technol 4(2):024001. https:\/\/doi.org\/10.1088\/2058-9565\/aaea94","journal-title":"Quantum Sci Technol"},{"key":"208_CR17","doi-asserted-by":"publisher","unstructured":"Kak S (1995) On quantum neural computing. Inf Sci 83(3):143\u2013160. ISSN 0020-0255. https:\/\/doi.org\/10.1016\/0020-0255(94)00095-S","DOI":"10.1016\/0020-0255(94)00095-S"},{"key":"208_CR18","unstructured":"Krizhevsky A, Hinton G et\u00a0al (2009) Learning multiple layers of features from tiny images. https:\/\/www.cs.toronto.edu\/~kriz\/learning-features-2009-TR.pdf. Technical Report"},{"key":"208_CR19","unstructured":"Kurakin A, Goodfellow I, Bengio S (2017) Adversarial machine learning at scale"},{"key":"208_CR20","doi-asserted-by":"publisher","unstructured":"LeCun Y, Bottou L, Bengio Y, Haffner P (1998) Gradient-based learning applied to document recognition. Proceedings of the IEEE 86:2278\u20132323. ISSN 00189219. https:\/\/doi.org\/10.1109\/5.726791","DOI":"10.1109\/5.726791"},{"key":"208_CR21","doi-asserted-by":"publisher","unstructured":"Liao H, Convy I, Huggins WJ, Whaley KB (2021) Robust in practice: adversarial attacks on quantum machine learning. Phys Rev A 103. https:\/\/doi.org\/10.1103\/PhysRevA.103.042427","DOI":"10.1103\/PhysRevA.103.042427"},{"issue":"6","key":"208_CR22","doi-asserted-by":"publisher","first-page":"062331","DOI":"10.1103\/PhysRevA.101.062331","volume":"101","author":"N Liu","year":"2020","unstructured":"Liu N, Wittek P (2020) Vulnerability of quantum classification to adversarial perturbations. Phys Rev A 101(6):062331","journal-title":"Phys Rev A"},{"issue":"3","key":"208_CR23","doi-asserted-by":"publisher","first-page":"033212","DOI":"10.1103\/PhysRevResearch.2.033212","volume":"2","author":"S Lu","year":"2020","unstructured":"Lu S, Duan LM, Deng DL (2020) Quantum adversarial machine learning. Phys Rev Res 2(3):033212","journal-title":"Phys Rev Res"},{"key":"208_CR24","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2017) Towards deep learning models resistant to adversarial attacks"},{"key":"208_CR25","unstructured":"Madry A, Makelov A, Schmidt L, Tsipras D, Vladu A (2019) Towards deep learning models resistant to adversarial attacks"},{"key":"208_CR26","doi-asserted-by":"crossref","unstructured":"Mottonen M, Vartiainen JJ, Bergholm V, Salomaa MM 2004 Transformation of quantum states using uniformly controlled rotations","DOI":"10.26421\/QIC5.6-5"},{"key":"208_CR27","doi-asserted-by":"publisher","unstructured":"Nielsen MA, Chuang IL (2010) Quantum computation and quantum information: 10th anniversary edition. Cambridge University Press. https:\/\/doi.org\/10.1017\/CBO9780511976667","DOI":"10.1017\/CBO9780511976667"},{"key":"208_CR28","unstructured":"Paszke A, Gross S, Massa F, Lerer A, Bradbury J, Chanan G, Killeen T, Lin Z, Gimelshein N, Antiga L, Desmaison A Kopf A, Yang E, DeVito Z, Raison M, Tejani A, Chilamkurthy S, Steiner B, Fang L, Bai J, Chintala S (2019) Pytorch: an imperative style, high-performance deep learning library. In: Advances in neural information processing systems 32, pp 8024\u20138035. Curran Associates, Inc"},{"key":"208_CR29","unstructured":"Poland K, Beer K, Osborne TJ (2020) No free lunch for quantum machine learning. arXiv:2003.14103"},{"key":"208_CR30","doi-asserted-by":"publisher","first-page":"79","DOI":"10.22331\/q-2018-08-06-79","volume":"2","author":"J Preskill","year":"2018","unstructured":"Preskill J (2018) Quantum computing in the NISQ era and beyond. Quantum 2:79","journal-title":"Quantum"},{"key":"208_CR31","unstructured":"Sahdev A, Kumar M (2023) Adversarial robustness based on randomized smoothing in quantum machine learning https:\/\/openreview.net\/forum?id=o-Yxq5iicIp"},{"key":"208_CR32","unstructured":"Salman H, Yang G, Li J, Zhang P, Zhang H, Razenshteyn I, Bubeck S (2020) Provably robust deep learning via adversarially trained smoothed classifiers"},{"key":"208_CR33","doi-asserted-by":"crossref","unstructured":"Schuld M, Petruccione F (2018) Supervised learning with quantum computers, vol 17. Springer","DOI":"10.1007\/978-3-319-96424-9"},{"key":"208_CR34","doi-asserted-by":"publisher","unstructured":"Schuld M, Bocharov A, Svore KM, Wiebe N (2020) Circuit-centric quantum classifiers. Phys Rev A 101(3). ISSN 2469-9934. https:\/\/doi.org\/10.1103\/physreva.101.032308","DOI":"10.1103\/physreva.101.032308"},{"key":"208_CR35","doi-asserted-by":"crossref","unstructured":"Shor PW (1994) Algorithms for quantum computation: discrete logarithms and factoring. In: Proceedings 35th annual symposium on foundations of computer science, pp 124\u2013134. Ieee","DOI":"10.1109\/SFCS.1994.365700"},{"key":"208_CR36","unstructured":"Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I, Fergus R (2013) Intriguing properties of neural networks. arXiv:1312.6199"},{"key":"208_CR37","doi-asserted-by":"publisher","first-page":"471","DOI":"10.1023\/A:1024022632303","volume":"1","author":"CA Trugenberger","year":"2002","unstructured":"Trugenberger CA (2002) Quantum pattern recognition. Quantum Inf Process 1:471\u2013493","journal-title":"Quantum pattern recognition. Quantum Inf Process"},{"key":"208_CR38","doi-asserted-by":"publisher","unstructured":"Van der Walt S, Sch\u00f6nberger JL, Nunez-Iglesias J, Boulogne F, Warner JD, Yager N, Gouillart E, Yu T, and the scikit-image contributors (2014) Scikit-image: image processing in Python. PeerJ, 2:e453. ISSN 2167-8359. https:\/\/doi.org\/10.7717\/peerj.453","DOI":"10.7717\/peerj.453"},{"issue":"1\u20134","key":"208_CR39","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1016\/S0020-0255(99)00101-2","volume":"124","author":"D Ventura","year":"2000","unstructured":"Ventura D, Martinez T (2000) Quantum associative memory. Inf Sci 124(1\u20134):273\u2013296","journal-title":"Inf Sci"},{"key":"208_CR40","doi-asserted-by":"crossref","unstructured":"Wang H, Gu J, Ding Y, Li Z, Chong FT, Pan DZ, Han S (2023) Quantumnat: quantum noise-aware training with noise injection, quantization and normalization","DOI":"10.1145\/3489517.3530400"},{"key":"208_CR41","doi-asserted-by":"crossref","unstructured":"Wang Z, Liang Z, Zhou S, Ding C, Shi Y, Jiang W (2021) Exploration of quantum neural architecture by mixing quantum neuron designs","DOI":"10.1109\/ICCAD51958.2021.9643575"},{"key":"208_CR42","doi-asserted-by":"publisher","unstructured":"Weber M, Liu N, Li B, Zhang C, Zhao Z (2021) Optimal provable robustness of quantum classification via quantum hypothesis testing. npj Quantum Information, 7(1). https:\/\/doi.org\/10.1038\/s41534-021-00410-5","DOI":"10.1038\/s41534-021-00410-5"}],"container-title":["Quantum Machine Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42484-024-00208-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s42484-024-00208-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42484-024-00208-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,23]],"date-time":"2024-12-23T16:14:27Z","timestamp":1734970467000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s42484-024-00208-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,19]]},"references-count":42,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2024,12]]}},"alternative-id":["208"],"URL":"https:\/\/doi.org\/10.1007\/s42484-024-00208-6","relation":{},"ISSN":["2524-4906","2524-4914"],"issn-type":[{"value":"2524-4906","type":"print"},{"value":"2524-4914","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11,19]]},"assertion":[{"value":"20 December 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 October 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 November 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no Conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}}],"article-number":"83"}}