{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T03:30:17Z","timestamp":1784086217270,"version":"3.55.0"},"reference-count":87,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2023,5,25]],"date-time":"2023-05-25T00:00:00Z","timestamp":1684972800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,5,25]],"date-time":"2023-05-25T00:00:00Z","timestamp":1684972800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Nat Mach Intell"],"DOI":"10.1038\/s42256-023-00661-1","type":"journal-article","created":{"date-parts":[[2023,5,25]],"date-time":"2023-05-25T16:03:15Z","timestamp":1685030595000},"page":"581-589","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":78,"title":["Towards quantum enhanced adversarial robustness in machine learning"],"prefix":"10.1038","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4500-3139","authenticated-orcid":false,"given":"Maxwell T.","family":"West","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1983-4377","authenticated-orcid":false,"given":"Shu-Lok","family":"Tsang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jia S.","family":"Low","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Charles D.","family":"Hill","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher","family":"Leckie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7672-6965","authenticated-orcid":false,"given":"Lloyd C. L.","family":"Hollenberg","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sarah M.","family":"Erfani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3476-2348","authenticated-orcid":false,"given":"Muhammad","family":"Usman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,5,25]]},"reference":[{"key":"661_CR1","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1038\/nature14539","volume":"521","author":"Y LeCun","year":"2015","unstructured":"LeCun, Y., Bengio, Y. & Hinton, G. Deep learning. Nature 521, 436\u2013444 (2015).","journal-title":"Nature"},{"key":"661_CR2","doi-asserted-by":"crossref","unstructured":"Biggio, B. et al. Evasion attacks against machine learning at test time. In Proc. Joint European Conference on Machine Learning and Knowledge Discovery in Databases 387\u2013402 (Springer, 2013).","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"661_CR3","unstructured":"Szegedy, C. et al. Intriguing properties of neural networks. Preprint at https:\/\/arxiv.org\/abs\/1312.6199 (2013)."},{"key":"661_CR4","doi-asserted-by":"crossref","unstructured":"Huang, L., Joseph, A. D., Nelson, B., Rubinstein, B. I. & Tygar, J. D. Adversarial machine learning. In Proc. 4th ACM Workshop on Security and Artificial Intelligence AISec \u201911 43\u201358 (Association for Computing Machinery, 2011).","DOI":"10.1145\/2046684.2046692"},{"key":"661_CR5","unstructured":"Kurakin, A., Goodfellow, I. & Bengio, S. Adversarial machine learning at scale. Preprint at https:\/\/arxiv.org\/abs\/1611.01236 (2016)."},{"key":"661_CR6","doi-asserted-by":"publisher","first-page":"828","DOI":"10.1109\/TEVC.2019.2890858","volume":"23","author":"J Su","year":"2019","unstructured":"Su, J., Vargas, D. V. & Sakurai, K. One pixel attack for fooling deep neural networks. IEEE Trans. Evolution. Comput. 23, 828\u2013841 (2019).","journal-title":"IEEE Trans. Evolution. Comput."},{"key":"661_CR7","unstructured":"Athalye, A., Carlini, N. & Wagner, D. Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples. In Proc. International Conference on Machine Learning 274\u2013283 (PMLR, 2018)."},{"key":"661_CR8","unstructured":"Goodfellow, I. J., Shlens, J. & Szegedy, C. Explaining and harnessing adversarial examples. Preprint at https:\/\/arxiv.org\/abs\/1412.6572 (2014)."},{"key":"661_CR9","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I. J. & Bengio, S. in Artificial Intelligence Safety and Security 99\u2013112 (Chapman & Hall, 2018).","DOI":"10.1201\/9781351251389-8"},{"key":"661_CR10","doi-asserted-by":"crossref","unstructured":"Eykholt, K. et al. Robust physical-world attacks on deep learning visual classification. In Proc. IEEE Conference on Computer Vision and Pattern Recognition 1625\u20131634 (IEEE, 2018).","DOI":"10.1109\/CVPR.2018.00175"},{"key":"661_CR11","doi-asserted-by":"crossref","unstructured":"Carlini, N. & Wagner, D. Adversarial examples are not easily detected: bypassing ten detection methods. In Proc. 10th ACM Workshop on Artificial Intelligence and Security 3\u201314 (Association for Computing Machinery, 2017).","DOI":"10.1145\/3128572.3140444"},{"key":"661_CR12","unstructured":"Wong, E., Rice, L. & Kolter, J. Z. Fast is better than free: revisiting adversarial training. Preprint at https:\/\/arxiv.org\/abs\/2001.03994 (2020)."},{"key":"661_CR13","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D. & Vladu, A. Towards deep learning models resistant to adversarial attacks. Preprint at https:\/\/arxiv.org\/abs\/1706.06083 (2017)."},{"key":"661_CR14","doi-asserted-by":"publisher","first-page":"56","DOI":"10.1145\/3134599","volume":"61","author":"I Goodfellow","year":"2018","unstructured":"Goodfellow, I., McDaniel, P. & Papernot, N. Making machine learning robust against adversarial inputs. Commun. ACM 61, 56\u201366 (2018).","journal-title":"Commun. ACM"},{"key":"661_CR15","doi-asserted-by":"publisher","first-page":"402","DOI":"10.1109\/JPROC.2020.2970615","volume":"108","author":"DJ Miller","year":"2020","unstructured":"Miller, D. J., Xiang, Z. & Kesidis, G. Adversarial learning targeting deep neural network classification: a comprehensive review of defenses against attacks. Proc. IEEE 108, 402\u2013433 (2020).","journal-title":"Proc. IEEE"},{"key":"661_CR16","unstructured":"Ilyas, A. et al. Adversarial examples are not bugs, they are features. In Advances in Neural Information Processing Systems 32 (Association for Computing Machinery, 2019)."},{"key":"661_CR17","doi-asserted-by":"crossref","unstructured":"Sharif, M., Bhagavatula, S., Bauer, L. & Reiter, M. K. Accessorize to a crime: real and stealthy attacks on state-of-the-art face recognition. In Proc. 2016 ACM SIGSAC Conference on Computer and Communications Security CCS \u201916 1528\u20131540 (Association for Computing Machinery, 2016).","DOI":"10.1145\/2976749.2978392"},{"key":"661_CR18","doi-asserted-by":"publisher","first-page":"195","DOI":"10.1038\/nature23474","volume":"549","author":"J Biamonte","year":"2017","unstructured":"Biamonte, J. et al. Quantum machine learning. Nature 549, 195\u2013202 (2017).","journal-title":"Nature"},{"key":"661_CR19","doi-asserted-by":"publisher","first-page":"033212","DOI":"10.1103\/PhysRevResearch.2.033212","volume":"2","author":"S Lu","year":"2020","unstructured":"Lu, S., Duan, L.-M. & Deng, D.-L. Quantum adversarial machine learning. Phys. Rev. Res. 2, 033212 (2020).","journal-title":"Phys. Rev. Res."},{"key":"661_CR20","doi-asserted-by":"publisher","first-page":"062331","DOI":"10.1103\/PhysRevA.101.062331","volume":"101","author":"N Liu","year":"2020","unstructured":"Liu, N. & Wittek, P. Vulnerability of quantum classification to adversarial perturbations. Phys. Rev. A 101, 062331 (2020).","journal-title":"Phys. Rev. A"},{"key":"661_CR21","doi-asserted-by":"publisher","first-page":"023153","DOI":"10.1103\/PhysRevResearch.3.023153","volume":"3","author":"Y Du","year":"2021","unstructured":"Du, Y., Hsieh, M.-H., Liu, T., Tao, D. & Liu, N. Quantum noise protects quantum classifiers against adversaries. Phys. Rev. Res. 3, 023153 (2021).","journal-title":"Phys. Rev. Res."},{"key":"661_CR22","doi-asserted-by":"crossref","unstructured":"Guan, J., Fang, W. & Ying, M. Robustness verification of quantum classifiers. In Proc. International Conference on Computer Aided Verification 151\u2013174 (Springer, 2021).","DOI":"10.1007\/978-3-030-81685-8_7"},{"key":"661_CR23","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1038\/s41534-021-00410-5","volume":"7","author":"M Weber","year":"2021","unstructured":"Weber, M., Liu, N., Li, B., Zhang, C. & Zhao, Z. Optimal provable robustness of quantum classification via quantum hypothesis testing. npj Quantum Inf. 7, 76 (2021).","journal-title":"npj Quantum Inf."},{"key":"661_CR24","doi-asserted-by":"publisher","first-page":"711","DOI":"10.1038\/s43588-022-00351-9","volume":"2","author":"W Ren","year":"2022","unstructured":"Ren, W. et al. Experimental quantum adversarial learning with programmable superconducting qubits. Nat. Comput. Sci. 2, 711\u2013717 (2022).","journal-title":"Nat. Comput. Sci."},{"key":"661_CR25","doi-asserted-by":"publisher","first-page":"042427","DOI":"10.1103\/PhysRevA.103.042427","volume":"103","author":"H Liao","year":"2021","unstructured":"Liao, H., Convy, I., Huggins, W. J. & Whaley, K. B. Robust in practice: adversarial attacks on quantum machine learning. Phys. Rev. A 103, 042427 (2021).","journal-title":"Phys. Rev. A"},{"key":"661_CR26","doi-asserted-by":"publisher","first-page":"045006","DOI":"10.1088\/2632-2153\/abf834","volume":"2","author":"A Kehoe","year":"2021","unstructured":"Kehoe, A., Wittek, P., Xue, Y. & Pozas-Kerstjens, A. Defence against adversarial attacks using classical and quantum-enhanced Boltzmann machines. Mach. Learn. Sci. Technol. 2, 045006 (2021).","journal-title":"Mach. Learn. Sci. Technol."},{"key":"661_CR27","unstructured":"West, M. et al. Benchmarking adversarially robust quantum machine learning at scale. Preprint at https:\/\/arxiv.org\/abs\/2211.12681 (2022)."},{"key":"661_CR28","doi-asserted-by":"publisher","first-page":"808","DOI":"10.1038\/s41467-020-14454-2","volume":"11","author":"K Beer","year":"2020","unstructured":"Beer, K. et al. Training deep quantum neural networks. Nat. Commun. 11, 808 (2020).","journal-title":"Nat. Commun."},{"key":"661_CR29","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1038\/s41586-019-0980-2","volume":"567","author":"V Havl\u00ed\u010dek","year":"2019","unstructured":"Havl\u00ed\u010dek, V. et al. Supervised learning with quantum-enhanced feature spaces. Nature 567, 209\u2013212 (2019).","journal-title":"Nature"},{"key":"661_CR30","doi-asserted-by":"publisher","first-page":"012324","DOI":"10.1103\/PhysRevA.98.012324","volume":"98","author":"P-L Dallaire-Demers","year":"2018","unstructured":"Dallaire-Demers, P.-L. & Killoran, N. Quantum generative adversarial networks. Phys. Rev. A 98, 012324 (2018).","journal-title":"Phys. Rev. A"},{"key":"661_CR31","doi-asserted-by":"publisher","first-page":"757","DOI":"10.1007\/s11128-013-0687-5","volume":"13","author":"S Lu","year":"2014","unstructured":"Lu, S. & Braunstein, S. L. Quantum decision tree classifier. Quantum Inf. Process. 13, 757\u2013770 (2014).","journal-title":"Quantum Inf. Process."},{"key":"661_CR32","doi-asserted-by":"publisher","first-page":"045001","DOI":"10.1088\/2058-9565\/aa8072","volume":"2","author":"J Romero","year":"2017","unstructured":"Romero, J., Olson, J. P. & Aspuru-Guzik, A. Quantum autoencoders for efficient compression of quantum data. Quantum Sci. Technol. 2, 045001 (2017).","journal-title":"Quantum Sci. Technol."},{"key":"661_CR33","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1038\/s41534-017-0017-3","volume":"3","author":"D Rist\u00e8","year":"2017","unstructured":"Rist\u00e8, D. et al. Demonstration of quantum advantage in machine learning. npj Quantum Inf. 3, 16 (2017).","journal-title":"npj Quantum Inf."},{"key":"661_CR34","doi-asserted-by":"publisher","first-page":"1182","DOI":"10.1126\/science.abn7293","volume":"376","author":"H-Y Huang","year":"2022","unstructured":"Huang, H.-Y. et al. Quantum advantage in learning from experiments. Science 376, 1182\u20131186 (2022).","journal-title":"Science"},{"key":"661_CR35","unstructured":"Ledoux, M. The Concentration of Measure Phenomenon (American Mathematical Society, 2001)."},{"key":"661_CR36","doi-asserted-by":"publisher","first-page":"582","DOI":"10.22331\/q-2021-11-17-582","volume":"5","author":"MC Caro","year":"2021","unstructured":"Caro, M. C., Gil-Fuster, E., Meyer, J. J., Eisert, J. & Sweke, R. Encoding-dependent generalization bounds for parametrized quantum circuits. Quantum 5, 582 (2021).","journal-title":"Quantum"},{"key":"661_CR37","doi-asserted-by":"publisher","first-page":"4919","DOI":"10.1038\/s41467-022-32550-3","volume":"13","author":"MC Caro","year":"2022","unstructured":"Caro, M. C. et al. Generalization in quantum machine learning from few training data. Nat. Commun. 13, 4919 (2022).","journal-title":"Nat. Commun."},{"key":"661_CR38","doi-asserted-by":"publisher","first-page":"040321","DOI":"10.1103\/PRXQuantum.2.040321","volume":"2","author":"L Banchi","year":"2021","unstructured":"Banchi, L., Pereira, J. & Pirandola, S. Generalization in quantum machine learning: a quantum information standpoint. PRX Quantum 2, 040321 (2021).","journal-title":"PRX Quantum"},{"key":"661_CR39","doi-asserted-by":"crossref","first-page":"nwab130","DOI":"10.1093\/nsr\/nwab011","volume":"9","author":"W Gong","year":"2022","unstructured":"Gong, W. & Deng, D. Universal adversarial examples and perturbations for quantum classifiers. Natl Sci. Rev. 9, nwab130 (2022).","journal-title":"Natl Sci. Rev."},{"key":"661_CR40","doi-asserted-by":"publisher","first-page":"032420","DOI":"10.1103\/PhysRevA.102.032420","volume":"102","author":"R LaRose","year":"2020","unstructured":"LaRose, R. & Coyle, B. Robust data encodings for quantum classifiers. Phys. Rev. A 102, 032420 (2020).","journal-title":"Phys. Rev. A"},{"key":"661_CR41","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1109\/MSP.2017.2765202","volume":"35","author":"A Creswell","year":"2018","unstructured":"Creswell, A. et al. Generative adversarial networks: an overview. IEEE Signal Process. Mag. 35, 53\u201365 (2018).","journal-title":"IEEE Signal Process. Mag."},{"key":"661_CR42","doi-asserted-by":"crossref","unstructured":"Chen, P.-Y., Zhang, H., Sharma, Y., Yi, J. & Hsieh, C.-J. ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In Proc. 10th ACM Workshop on Artificial Intelligence and Security 15\u201326 (Association for Computing Machinery, 2017).","DOI":"10.1145\/3128572.3140448"},{"key":"661_CR43","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y Lecun","year":"1998","unstructured":"Lecun, Y., Bottou, L., Bengio, Y. & Haffner, P. Gradient-based learning applied to document recognition. Proc. IEEE 86, 2278\u20132324 (1998).","journal-title":"Proc. IEEE"},{"key":"661_CR44","unstructured":"Jiang, S., Lu, S. & Deng, D.-L. Adversarial machine learning phases of matter. Preprint at https:\/\/arxiv.org\/abs\/1910.13453 (2019)."},{"key":"661_CR45","unstructured":"Guo, C., Rana, M., Cisse, M. & Van Der Maaten, L. Countering adversarial images using input transformations. Preprint at https:\/\/arxiv.org\/abs\/1711.00117 (2017)."},{"key":"661_CR46","unstructured":"Buckman, J., Roy, A., Raffel, C. & Goodfellow, I. Thermometer encoding: one hot way to resist adversarial examples. In International Conference on Learning Representations (ICLR, 2018)."},{"key":"661_CR47","unstructured":"Feinman, R., Curtin, R. R., Shintre, S. & Gardner, A. B. Detecting adversarial samples from artifacts. Preprint at https:\/\/arxiv.org\/abs\/1703.00410 (2017)."},{"key":"661_CR48","unstructured":"Salman, H. et al. Provably robust deep learning via adversarially trained smoothed classifiers. In Advances in Neural Information Processing Systems 32 (Association for Computing Machinery, 2019)."},{"key":"661_CR49","unstructured":"Zhang, H. et al. Theoretically principled trade-off between robustness and accuracy. In Proc. International Conference on Machine Learning 7472\u20137482 (PMLR, 2019)."},{"key":"661_CR50","doi-asserted-by":"crossref","unstructured":"Lecuyer, M., Atlidakis, V., Geambasu, R., Hsu, D. & Jana, S. Certified robustness to adversarial examples with differential privacy. In Proc. 2019 IEEE Symposium on Security and Privacy (SP) 656\u2013672 (IEEE, 2019).","DOI":"10.1109\/SP.2019.00044"},{"key":"661_CR51","unstructured":"Cohen, J., Rosenfeld, E. & Kolter, Z. Certified adversarial robustness via randomized smoothing. In Proc. International Conference on Machine Learning 1310\u20131320 (PMLR, 2019)."},{"key":"661_CR52","unstructured":"Wong, E., Schmidt, F., Metzen, J. H. & Kolter, J. Z. Scaling provable adversarial defenses. In Advances in Neural Information Processing Systems 31 (Association for Computing Machinery, 2018)."},{"key":"661_CR53","unstructured":"Raghunathan, A., Steinhardt, J. & Liang, P. Certified defenses against adversarial examples. Preprint at https:\/\/arxiv.org\/abs\/1801.09344 (2018)."},{"key":"661_CR54","doi-asserted-by":"crossref","unstructured":"Tran, H.-D., Bak, S., Xiang, W. & Johnson, T. T. in Computer Aided Verification (eds Lahiri, S. K. & Wang, C.) 18\u201342 (Springer, 2020).","DOI":"10.1007\/978-3-030-53288-8_2"},{"key":"661_CR55","doi-asserted-by":"crossref","unstructured":"Elboher, Y. Y., Gottschlich, J. & Katz, G. An abstraction-based framework for neural network verification. In Proc. International Conference on Computer Aided Verification 43\u201365 (Springer, 2020).","DOI":"10.1007\/978-3-030-53288-8_3"},{"key":"661_CR56","doi-asserted-by":"crossref","unstructured":"Fremont, D. J., Chiu, J., Margineantu, D. D., Osipychev, D. & Seshia, S. A. Formal analysis and redesign of a neural network-based aircraft taxiing system with verifai. CoRR 2005.07173 (2020).","DOI":"10.1007\/978-3-030-53288-8_6"},{"key":"661_CR57","doi-asserted-by":"crossref","unstructured":"Huang, X., Kwiatkowska, M., Wang, S. & Wu, M. Safety verification of deep neural networks. In Computer Aided Verification: 29th International Conference, CAV 2017, Heidelberg, Germany, July 24-28, 2017, Proceedings, Part I 3\u201329 (Springer International Publishing, 2017).","DOI":"10.1007\/978-3-319-63387-9_1"},{"key":"661_CR58","doi-asserted-by":"crossref","unstructured":"Zhou, L. & Ying, M. Differential privacy in quantum computation. In Proc. 2017 IEEE 30th Computer Security Foundations Symposium (CSF) 249\u2013262 (IEEE, 2017).","DOI":"10.1109\/CSF.2017.23"},{"key":"661_CR59","doi-asserted-by":"crossref","unstructured":"Dwork, C. Differential privacy: a survey of results. In Proc. International Conference on Theory and Applications of Models of Computation 1\u201319 (Springer, 2008).","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"661_CR60","doi-asserted-by":"publisher","first-page":"254","DOI":"10.1016\/S0019-9958(67)90302-6","volume":"10","author":"CW Helstrom","year":"1967","unstructured":"Helstrom, C. W. Detection theory and quantum mechanics. Inf. Control 10, 254\u2013291 (1967).","journal-title":"Inf. Control"},{"key":"661_CR61","doi-asserted-by":"publisher","first-page":"337","DOI":"10.1016\/0047-259X(73)90028-6","volume":"3","author":"AS Holevo","year":"1973","unstructured":"Holevo, A. S. Statistical decision theory for quantum systems. J. Multivariate Anal. 3, 337\u2013394 (1973).","journal-title":"J. Multivariate Anal."},{"key":"661_CR62","doi-asserted-by":"crossref","unstructured":"Bai, T., Luo, J., Zhao, J., Wen, B. & Wang, Q. Recent advances in adversarial training for adversarial robustness. Preprint at https:\/\/arxiv.org\/abs\/2102.01356 (2021).","DOI":"10.24963\/ijcai.2021\/591"},{"key":"661_CR63","unstructured":"Kang, D., Sun, Y., Brown, T., Hendrycks, D. & Steinhardt, J. Transfer of adversarial robustness between perturbation types. Preprint at https:\/\/arxiv.org\/abs\/1905.01034 (2019)."},{"key":"661_CR64","unstructured":"Tsipras, D., Santurkar, S., Engstrom, L., Turner, A. & Madry, A. Robustness may be at odds with accuracy. Preprint at https:\/\/arxiv.org\/abs\/1805.12152 (2018)."},{"key":"661_CR65","doi-asserted-by":"publisher","first-page":"1013","DOI":"10.1038\/s41567-021-01287-z","volume":"17","author":"Y Liu","year":"2021","unstructured":"Liu, Y., Arunachalam, S. & Temme, K. A rigorous and robust quantum speed-up in supervised machine learning. Nat. Phys. 17, 1013\u20131017 (2021).","journal-title":"Nat. Phys."},{"key":"661_CR66","doi-asserted-by":"crossref","unstructured":"Schuld, M. & Petruccione, F. In Machine Learning with Quantum Computers 2926, 217\u2013245 (2021).","DOI":"10.1007\/978-3-030-83098-4_6"},{"key":"661_CR67","doi-asserted-by":"crossref","unstructured":"Li, W., Lu, Z. & Deng, D. Quantum neural network classifiers: a tutorial. SciPost Phys. Lect. Notes 61 (2022).","DOI":"10.21468\/SciPostPhysLectNotes.61"},{"key":"661_CR68","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s42484-020-00012-y","volume":"2","author":"M Henderson","year":"2020","unstructured":"Henderson, M., Shakya, S., Pradhan, S. & Cook, T. Quanvolutional neural networks: powering image recognition with quantum circuits. Quantum Mach. Intell. 2, 1\u20139 (2020).","journal-title":"Quantum Mach. Intell."},{"key":"661_CR69","doi-asserted-by":"publisher","first-page":"043007","DOI":"10.1103\/PhysRevResearch.4.043007","volume":"4","author":"R Dilip","year":"2022","unstructured":"Dilip, R., Liu, Y. J., Smith, A. & Pollmann, F. Data compression for quantum machine learning. Phys. Rev. Res. 4, 043007 (2022).","journal-title":"Phys. Rev. Res."},{"key":"661_CR70","doi-asserted-by":"publisher","first-page":"4812","DOI":"10.1038\/s41467-018-07090-4","volume":"9","author":"JR McClean","year":"2018","unstructured":"McClean, J. R., Boixo, S., Smelyanskiy, V. N., Babbush, R. & Neven, H. Barren plateaus in quantum neural network training landscapes. Nat. Commun. 9, 4812 (2018).","journal-title":"Nat. Commun."},{"key":"661_CR71","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1145\/3422622","volume":"63","author":"I Goodfellow","year":"2020","unstructured":"Goodfellow, I. et al. Generative adversarial networks. Commun. ACM 63, 139\u2013144 (2020).","journal-title":"Commun. ACM"},{"key":"661_CR72","doi-asserted-by":"crossref","unstructured":"Hu, W. & Tan, Y. In Data Mining and Big Data: 7th International Conference, DMBD 2022, Beijing, China, November 21\u201324, 2022, Proceedings, Part II 409\u2013423 (Springer, 2023).","DOI":"10.1007\/978-981-19-8991-9_29"},{"key":"661_CR73","doi-asserted-by":"crossref","unstructured":"Xiao, C. et al. Generating adversarial examples with adversarial networks. Preprint at https:\/\/arxiv.org\/abs\/1801.02610 (2018).","DOI":"10.24963\/ijcai.2018\/543"},{"key":"661_CR74","unstructured":"Samangouei, P., Kabkab, M. & Chellappa, R. Defense-GAN: protecting classifiers against adversarial attacks using generative models. Preprint at https:\/\/arxiv.org\/abs\/1805.06605 (2018)."},{"key":"661_CR75","doi-asserted-by":"crossref","unstructured":"Jin, G., Shen, S., Zhang, D., Dai, F. & Zhang, Y. APE-GAN: Adversarial perturbation elimination with GAN. In ICASSP 2019-2019 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) 3842\u20133846 (2019).","DOI":"10.1109\/ICASSP.2019.8683044"},{"key":"661_CR76","doi-asserted-by":"publisher","first-page":"040502","DOI":"10.1103\/PhysRevLett.121.040502","volume":"121","author":"S Lloyd","year":"2018","unstructured":"Lloyd, S. & Weedbrook, C. Quantum generative adversarial learning. Phys. Rev. Lett. 121, 040502 (2018).","journal-title":"Phys. Rev. Lett."},{"key":"661_CR77","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1038\/s41534-019-0223-2","volume":"5","author":"C Zoufal","year":"2019","unstructured":"Zoufal, C., Lucchi, A. & Woerner, S. Quantum Generative Adversarial Networks for learning and loading random distributions. npj Quantum Inf. 5, 103 (2019).","journal-title":"npj Quantum Inf."},{"key":"661_CR78","doi-asserted-by":"publisher","first-page":"161","DOI":"10.1038\/s41534-021-00498-9","volume":"7","author":"E Peters","year":"2021","unstructured":"Peters, E. et al. Machine learning of high dimensional data on a noisy quantum processor. npj Quantum Inf. 7, 161 (2021).","journal-title":"npj Quantum Inf."},{"key":"661_CR79","doi-asserted-by":"publisher","first-page":"6301","DOI":"10.1038\/s41467-020-20113-3","volume":"11","author":"GAL White","year":"2020","unstructured":"White, G. A. L., Hill, C. D., Pollock, F. A., Hollenberg, L. C. L. & Modi, K. Demonstration of non-Markovian process characterisation and control on a quantum processor. Nat. Commun. 11, 6301 (2020).","journal-title":"Nat. Commun."},{"key":"661_CR80","doi-asserted-by":"publisher","first-page":"032324","DOI":"10.1103\/PhysRevA.86.032324","volume":"86","author":"AG Fowler","year":"2012","unstructured":"Fowler, A. G., Mariantoni, M., Martinis, J. M. & Cleland, A. N. Surface codes: towards practical large-scale quantum computation. Phys. Rev. A 86, 032324 (2012).","journal-title":"Phys. Rev. A"},{"key":"661_CR81","unstructured":"Gambetta, J. Expanding the IBM Quantum roadmap to anticipate the future of quantum-centric supercomputing (IBM, 2022); https:\/\/research.ibm.com\/blog\/ibm-quantum-roadmap-2025"},{"key":"661_CR82","unstructured":"Our quantum computing journey (Quantumai); https:\/\/quantumai.google\/learn\/map"},{"key":"661_CR83","unstructured":"Scaling IonQ\u2019s quantum computers: the roadmap (IonQ, 2020); https:\/\/ionq.com\/posts\/december-09-2020-scaling-quantum-computer-roadmap"},{"key":"661_CR84","doi-asserted-by":"publisher","first-page":"396","DOI":"10.22331\/q-2021-02-15-396","volume":"5","author":"GJ Mooney","year":"2021","unstructured":"Mooney, G. J., Hill, C. D. & Hollenberg, L. C. L. Cost-optimal single-qubit gate synthesis in the Clifford hierarchy. Quantum 5, 396 (2021).","journal-title":"Quantum"},{"key":"661_CR85","doi-asserted-by":"publisher","unstructured":"Campbell, E. & O\u2019Gorman, J. An efficient magic state approach to small angle rotations. Quantum Sci. Technol. https:\/\/doi.org\/10.1088\/2058-9565\/1\/1\/015007 (2016).","DOI":"10.1088\/2058-9565\/1\/1\/015007"},{"key":"661_CR86","doi-asserted-by":"publisher","first-page":"022316","DOI":"10.1103\/PhysRevA.95.022316","volume":"95.2","author":"ET Campbell","year":"2017","unstructured":"Campbell, E. T. & Howard, M. Unified framework for magic state distillation and multiqubit gate synthesis with reduced resource cost. Phys Rev. A 95.2, 022316 (2017).","journal-title":"Phys Rev. A"},{"key":"661_CR87","unstructured":"Gicev, S., Hollenberg, L. C. & Usman, M. A scalable and fast artificial neural network syndrome decoder for surface codes. Preprint at https:\/\/arxiv.org\/abs\/2110.05854 (2021)."}],"container-title":["Nature Machine Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s42256-023-00661-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s42256-023-00661-1","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s42256-023-00661-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,21]],"date-time":"2023-06-21T23:13:33Z","timestamp":1687389213000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s42256-023-00661-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,25]]},"references-count":87,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2023,6]]}},"alternative-id":["661"],"URL":"https:\/\/doi.org\/10.1038\/s42256-023-00661-1","relation":{},"ISSN":["2522-5839"],"issn-type":[{"value":"2522-5839","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,5,25]]},"assertion":[{"value":"29 June 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 April 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 May 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}]}}