QML-PipeGuard: Detecting Channel-Substitution Attacks on Quantum Machine Learning Pipelines in Untrusted Clouds

arXiv:2605.25066 · quant-ph, cs.CR, cs.LG · Submitted 2026-05-24 · Read on arXiv

quant-ph, cs.CR, cs.LG

Submitted: 2026-05-24

Updated: 2026-10-20

Comments: 30 pages, 4 figures. Extended version of a paper accepted at NordSec 2026 (Springer LNCS). Contains the full appendices omitted from the proceedings version for length. Supersedes v1: the detection and drift guarantees are now stated at the marginal level with a tight constant, and the finite-shot analysis controls both error directions

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Absorb — 1× in this paper · explained in 1 episode
• Calibration — 1× in this paper · explained in 9 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Verification — 1× in this paper · explained in 2 episodes

Related papers

• Reconquering Bell sampling on qudits: stabilizer learning and testing, quantum pseudorandomness bounds, and more
• Encrypted clones can leak: Classification of informative subsets in Quantum Encrypted Cloning
• Polynomial-time classical and quantum simulation of quantum impurity models
• Incoherent Imaging with Spatially Structured Quantum Probes
• A quasiparticle-protected superconducting qubit
• Theory of quantum-enhanced interferometry with general Markovian light sources