Quantum noise protects quantum classifiers against adversaries

• URL: http://arxiv.org/abs/2003.09416v1
• Date: Fri, 20 Mar 2020 17:56:14 GMT
• Title: Quantum noise protects quantum classifiers against adversaries
• Authors: Yuxuan Du, Min-Hsiu Hsieh, Tongliang Liu, Dacheng Tao and Nana Liu
• Abstract summary: Noise in quantum information processing is often viewed as a disruptive and difficult-to-avoid feature, especially in near-term quantum technologies. We show that by taking advantage of depolarisation noise in quantum circuits for classification, a robustness bound against adversaries can be derived. This is the first quantum protocol that can be used against the most general adversaries.
• Score: 120.08771960032033
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Noise in quantum information processing is often viewed as a disruptive and difficult-to-avoid feature, especially in near-term quantum technologies. However, noise has often played beneficial roles, from enhancing weak signals in stochastic resonance to protecting the privacy of data in differential privacy. It is then natural to ask, can we harness the power of quantum noise that is beneficial to quantum computing? An important current direction for quantum computing is its application to machine learning, such as classification problems. One outstanding problem in machine learning for classification is its sensitivity to adversarial examples. These are small, undetectable perturbations from the original data where the perturbed data is completely misclassified in otherwise extremely accurate classifiers. They can also be considered as `worst-case' perturbations by unknown noise sources. We show that by taking advantage of depolarisation noise in quantum circuits for classification, a robustness bound against adversaries can be derived where the robustness improves with increasing noise. This robustness property is intimately connected with an important security concept called differential privacy which can be extended to quantum differential privacy. For the protection of quantum data, this is the first quantum protocol that can be used against the most general adversaries. Furthermore, we show how the robustness in the classical case can be sensitive to the details of the classification model, but in the quantum case the details of classification model are absent, thus also providing a potential quantum advantage for classical data that is independent of quantum speedups. This opens the opportunity to explore other ways in which quantum noise can be used in our favour, as well as identifying other ways quantum algorithms can be helpful that is independent of quantum speedups.

Related papers

• The curse of random quantum data [62.24825255497622]
  We quantify the performances of quantum machine learning in the landscape of quantum data. We find that the training efficiency and generalization capabilities in quantum machine learning will be exponentially suppressed with the increase in qubits. Our findings apply to both the quantum kernel method and the large-width limit of quantum neural networks.
  arXiv  Detail & Related papers  (2024-08-19T12:18:07Z)
• Barycentric and Pairwise Renyi Quantum Leakage [9.244521717083696]
  Barycentric and pairwise quantum Renyi leakages are proposed as measures of information leakage for privacy and security analysis. They satisfy important properties of positivity, independence, post-processing inequality, and unitary invariance. Global and local depolarizing channels, that are common models of noise in quantum computing and communication, restrict private or secure information leakage.
  arXiv  Detail & Related papers  (2024-02-09T03:09:33Z)
• Power Characterization of Noisy Quantum Kernels [52.47151453259434]
  We show that noise may make quantum kernel methods to only have poor prediction capability, even when the generalization error is small. We provide a crucial warning to employ noisy quantum kernel methods for quantum computation.
  arXiv  Detail & Related papers  (2024-01-31T01:02:16Z)
• QuantumSEA: In-Time Sparse Exploration for Noise Adaptive Quantum Circuits [82.50620782471485]
  QuantumSEA is an in-time sparse exploration for noise-adaptive quantum circuits. It aims to achieve two key objectives: (1) implicit circuits capacity during training and (2) noise robustness. Our method establishes state-of-the-art results with only half the number of quantum gates and 2x time saving of circuit executions.
  arXiv  Detail & Related papers  (2024-01-10T22:33:00Z)
• Maximal Information Leakage from Quantum Encoding of Classical Data [9.244521717083696]
  An adversary can access a single copy of the state of a quantum system that encodes some classical data. The resulting measure of information leakage is the multiplicative increase of the probability of correctly guessing any function of the classical data.
  arXiv  Detail & Related papers  (2023-07-24T05:16:02Z)
• Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise [68.1992787416233]
  We show that adding quantum random rotation noise can improve robustness in quantum classifiers against adversarial attacks. We derive a certified robustness bound to enable quantum classifiers to defend against adversarial examples.
  arXiv  Detail & Related papers  (2022-11-02T05:17:04Z)
• Noisy Quantum Kernel Machines [58.09028887465797]
  An emerging class of quantum learning machines is that based on the paradigm of quantum kernels. We study how dissipation and decoherence affect their performance. We show that decoherence and dissipation can be seen as an implicit regularization for the quantum kernel machines.
  arXiv  Detail & Related papers  (2022-04-26T09:52:02Z)
• Quantum Noise Sensing by generating Fake Noise [5.8010446129208155]
  We propose a framework to characterize noise in a realistic quantum device. Key idea is to learn about the noise by mimicking it in a way that one cannot distinguish between the real (to be sensed) and the fake (generated) one. We find that, when applied to the benchmarking case of Pauli channels, the SuperQGAN protocol is able to learn the associated error rates even in the case of spatially and temporally correlated noise.
  arXiv  Detail & Related papers  (2021-07-19T09:42:37Z)
• A rigorous and robust quantum speed-up in supervised machine learning [6.402634424631123]
  In this paper, we establish a rigorous quantum speed-up for supervised classification using a general-purpose quantum learning algorithm. Our quantum classifier is a conventional support vector machine that uses a fault-tolerant quantum computer to estimate a kernel function.
  arXiv  Detail & Related papers  (2020-10-05T17:22:22Z)
• Optimal Provable Robustness of Quantum Classification via Quantum Hypothesis Testing [14.684867444153625]
  Quantum machine learning models have the potential to offer speedups and better predictive accuracy compared to their classical counterparts. These quantum algorithms, like their classical counterparts, have been shown to be vulnerable to input perturbations. These can arise either from noisy implementations or, as a worst-case type of noise, adversarial attacks.
  arXiv  Detail & Related papers  (2020-09-21T17:55:28Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.