Adversarial Robustness in Fake Quantum Simulators
Abstract
This paper investigates the performance scalability and adversarial robustness of Quantum Machine Learning (QML) models deployed on noise-model-based fake simulators. We conduct a dual-phased study, first benchmarking the computational throughput of Qiskit's Aer simulation engine across varying hardware architectures, and second, evaluating the effectiveness of Projected Gradient Descent (PGD) attacks and adversarial retraining strategies under realistic noise conditions. Our results quantify the runtime tradeoffs and scaling behavior for medium-scale simulations (projected up to 8 qubits) and demonstrate that high adversarial-to-benign retraining ratios (50/50) are essential for achieving practical model robustness for 4-qubit classifiers under realistic noise conditions.
Related
- Q-MALDetect: Quantum Image-Based Malware Detection and Adversarial Robustness Analysis
- Certifying Adversarial Robustness of Quantum Classifiers under Known-Readout Query Access
- Residual-Guided Global-Drive Design in Trapped-Ion Quantum Simulators
- Benchmarking Zero-Setup Quantum Circuit Simulators
- Characterizing quasiparticles in strongly correlated systems using nonlinear spectroscopy in quantum simulators
BibTeX
@misc{maußner2026adversarial,
title = {{Adversarial Robustness in Fake Quantum Simulators}},
author = {Marc Maußner and Volker Reers},
howpublished = {arXiv},
year = {2026},
month = oct,
doi = {10.48550/arxiv.2610.01574},
eprint = {2610.01574},
archivePrefix = {arXiv},
url = {https://arxiv.org/abs/2610.01574},
}
RIS
TY - UNPB
TI - Adversarial Robustness in Fake Quantum Simulators
AU - Marc Maußner
AU - Volker Reers
PY - 2026
DA - 2026/10/01
PB - arXiv
DO - 10.48550/arxiv.2610.01574
UR - https://arxiv.org/abs/2610.01574
AB - This paper investigates the performance scalability and adversarial robustness of Quantum Machine Learning (QML) models deployed on noise-model-based fake simulators. We conduct a dual-phased study, first benchmarking the computational throughput of Qiskit's Aer simulation engine across varying hardware architectures, and second, evaluating the effectiveness of Projected Gradient Descent (PGD) attacks and adversarial retraining strategies under realistic noise conditions. Our results quantify the runtime tradeoffs and scaling behavior for medium-scale simulations (projected up to 8 qubits) and demonstrate that high adversarial-to-benign retraining ratios (50/50) are essential for achieving practical model robustness for 4-qubit classifiers under realistic noise conditions.
ER -