An End-to-End Threat Model for the Quantum-as-a-Service Pipeline

• URL: http://arxiv.org/abs/2608.05836v1
• Date: Thu, 06 Aug 2026 10:04:59 GMT
• Title: An End-to-End Threat Model for the Quantum-as-a-Service Pipeline
• Abstract summary: Cloud-based accessing of Quantum-a-Service platforms such as IBM Quantum, IonQ Cloud, and Amazon Braket is becoming popular day by day.<n>Recent works have demonstrated various critical attacks at individual stages: tampering, SWAP attacks, QubitHammer, and so on.<n>These attacks remain separated because of their own terminology, and existing STRIDE-based threat modeling in the context of quantum lacks a structured view towards the QRIDE stack itself.
• Score: 1.4310278966797794
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Cloud-based accessing of Quantum-as-a-Service (QaaS) platforms such as IBM Quantum, IonQ Cloud, and Amazon Braket is becoming popular day by day. Hybrid quantum-classical algorithms (VQE, QAOA, QML) transfer data via a long layered pipeline of orchestration, compilation, and execution. Recent works have demonstrated various critical attacks at individual stages: Calibration tampering, SWAP attacks, QubitHammer, and so on. However, these attacks remain separated because of their own terminology, and existing STRIDE-based threat modeling in the context of quantum lacks a structured view towards the QaaS stack itself. We address this concern by decomposing the workflow into six-stage model with STRIDE threat modeling. Our matrix demonstrated attack vectors in quantum-specific, inherited classical, and plausible tiers for each of the stages. We further investigate the underexplored sections (repudiation and elevation-of-privilege) and distinguish three different cross-stage attack chains with higher impacts.

Related papers

• Backdoor Threats in Variational Quantum Circuits: Taxonomy, Attacks, and Defenses [7.269413622199604]
  Variational quantum algorithms (VQAs) are a central paradigm for noisy intermediate-scale (NISQ) quantum computing.<n>Their reliance on predesigned and pretrained variational quantum circuits (VQCs) introduces critical security vulnerabilities.<n>This paper presents a survey of backdoor attacks in VQCs, covering data-poisoning, compiler-level, and quantum-native mechanisms.
  arXiv  Detail & Related papers  (2026-05-13T17:17:20Z)
• Qute: Towards Quantum-Native Database [40.35292966418181]
  This paper envisions a quantum database (Qute) that treats quantum computation as a first-class execution option.<n>By deploying Qute on a real quantum processor, we show that it outperforms a classical baseline at scale.
  arXiv  Detail & Related papers  (2026-02-16T12:39:46Z)
• Noise-Resistant Feature-Aware Attack Detection Using Quantum Machine Learning [43.509065918669314]
  Continuous-variable quantum key distribution (CV-QKD) is a quantum communication technology that offers an unconditional security guarantee.<n>We propose a quantum machine learning (QML)-based attack detection framework (QML-ADF) that safeguards the security of high-rate CV-QKD systems.
  arXiv  Detail & Related papers  (2026-01-11T03:40:45Z)
• Towards Quantum Enhanced Adversarial Robustness with Rydberg Reservoir Learning [45.92935470813908]
  Quantum computing reservoir (QRC) leverages the high-dimensional, nonlinear dynamics inherent in quantum many-body systems.<n>Recent studies indicate that perturbation quantums based on variational circuits remain susceptible to adversarials.<n>We investigate the first systematic evaluation of adversarial robustness in a QR based learning model.
  arXiv  Detail & Related papers  (2025-10-15T12:17:23Z)
• Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security [32.73124984242397]
  Quantum Machine Learning (QML) systems inherit vulnerabilities from classical machine learning.<n>We present a detailed taxonomy of QML attack vectors mapped to corresponding stages in a quantum-aware kill chain framework.<n>This work provides a foundation for more realistic threat modeling and proactive security-in-depth design in the emerging field of quantum machine learning.
  arXiv  Detail & Related papers  (2025-07-11T14:25:36Z)
• Adversarial Threats in Quantum Machine Learning: A Survey of Attacks and Defenses [2.089191490381739]
  Quantum Machine Learning (QML) integrates quantum computing with classical machine learning to solve classification, regression and generative tasks.<n>This chapter examines adversarial threats unique to QML systems, focusing on vulnerabilities in cloud-based deployments, hybrid architectures, and quantum generative models.
  arXiv  Detail & Related papers  (2025-06-27T01:19:49Z)
• Bayesian Quantum Amplitude Estimation [46.03321798937855]
  We present BAE, a problem-tailored and noise-aware Bayesian algorithm for quantum amplitude estimation.<n>In a fault tolerant scenario, BAE is capable of saturating the Heisenberg limit; if device noise is present, BAE can dynamically characterize it and self-adapt.<n>We propose a benchmark for amplitude estimation algorithms and use it to test BAE against other approaches.
  arXiv  Detail & Related papers  (2024-12-05T18:09:41Z)
• Extending Quantum Perceptrons: Rydberg Devices, Multi-Class Classification, and Error Tolerance [67.77677387243135]
  Quantum Neuromorphic Computing (QNC) merges quantum computation with neural computation to create scalable, noise-resilient algorithms for quantum machine learning (QML) At the core of QNC is the quantum perceptron (QP), which leverages the analog dynamics of interacting qubits to enable universal quantum computation.
  arXiv  Detail & Related papers  (2024-11-13T23:56:20Z)
• Quantum Rewinding for IOP-Based Succinct Arguments [42.12045681000549]
  We prove that an interactive variant of the BCS transformation is secure in the standard model against quantum adversaries when the vector commitment scheme is collapsing.<n>As a consequence of our results, we obtain standard-model post-quantum secure succinct arguments with the best complexity known.
  arXiv  Detail & Related papers  (2024-11-08T06:33:08Z)
• Deep-learning-based continuous attacks on quantum key distribution protocols [0.0]
  In this paper, we design a new individual attack scheme called textitDeep-learning-based continuous attack (DLCA)<n>As a minimal model, we present our performances when applied in the case of the BB84 protocol with intrinsic noise in the communication channel.<n>Our results suggest that our attack's performances lie between the ones of standard intercept-and-resend attacks and of the optimal individual attack, namely the phase-covariant quantum cloner.
  arXiv  Detail & Related papers  (2024-08-22T17:39:26Z)
• Mitigation of Channel Tampering Attacks in Continuous-Variable Quantum Key Distribution [8.840486611542584]
  In CV-QKD, vulnerability to communication disruption persists from potential adversaries employing Denial-of-Service (DoS) attacks. Inspired by DoS attacks, this paper introduces a novel threat in CV-QKD called the Channel Amplification (CA) attack. To counter this threat, we propose a detection and mitigation strategy.
  arXiv  Detail & Related papers  (2024-01-29T05:48:51Z)
• Quantum Imitation Learning [74.15588381240795]
  We propose quantum imitation learning (QIL) with a hope to utilize quantum advantage to speed up IL. We develop two QIL algorithms, quantum behavioural cloning (Q-BC) and quantum generative adversarial imitation learning (Q-GAIL) Experiment results demonstrate that both Q-BC and Q-GAIL can achieve comparable performance compared to classical counterparts.
  arXiv  Detail & Related papers  (2023-04-04T12:47:35Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.