arXiv:2601.18058quant-phcs.CV2026-01被引 1

用可微分搜索提升量子视觉模型抗干扰能力,兼顾准确率与效率。

Differentiable Architecture Search for Adversarially Robust Quantum Computer Vision

  • 通过可微量子架构搜索+轻量噪声层,联合优化电路结构与鲁棒性。
  • 在MNIST、FashionMNIST等数据集上,干净与对抗准确率均优于现有方法。
  • 适合关注量子机器学习鲁棒性与实际部署的研究者和工程师。

当前量子神经网络对对抗扰动和硬件噪声极为敏感,严重制约其实用部署。现有鲁棒性技术通常牺牲纯净准确率或需极高计算资源。本文提出一种混合量子-经典可微量子架构搜索(DQAS)框架,通过梯度方法联合优化电路结构与鲁棒性。在量子处理前引入轻量级经典噪声层,实现门选择与噪声参数的同步优化。该设计保持量子电路完整性,同时引入可训练扰动以增强鲁棒性,且不损害标准性能。在MNIST、FashionMNIST和CIFAR数据集上的实验表明,相比现有量子架构搜索方法,本方法在多种攻击场景(包括FGSM、PGD、BIM、MIM)及真实量子噪声条件下,均显著提升干净与对抗准确率。在实际量子硬件上的测试验证了所发现架构的可行性。结果表明,结合策略性经典预处理与可微量子架构优化,能有效提升量子神经网络鲁棒性,同时保持计算高效。

原文摘要 · Abstract (English)

Current quantum neural networks suffer from extreme sensitivity to both adversarial perturbations and hardware noise, creating a significant barrier to real-world deployment. Existing robustness techniques typically sacrifice clean accuracy or require prohibitive computational resources. We propose a hybrid quantum-classical Differentiable Quantum Architecture Search (DQAS) framework that addresses these limitations by jointly optimizing circuit structure and robustness through gradient-based methods. Our approach enhances traditional DQAS with a lightweight Classical Noise Layer applied before quantum processing, enabling simultaneous optimization of gate selection and noise parameters. This design preserves the quantum circuit's integrity while introducing trainable perturbations that enhance robustness without compromising standard performance. Experimental validation on MNIST, FashionMNIST, and CIFAR datasets shows consistent improvements in both clean and adversarial accuracy compared to existing quantum architecture search methods. Under various attack scenarios, including Fast Gradient Sign Method (FGSM), Projected Gradient Descent (PGD), Basic Iterative Method (BIM), and Momentum Iterative Method (MIM), and under realistic quantum noise conditions, our hybrid framework maintains superior performance. Testing on actual quantum hardware confirms the practical viability of discovered architectures. These results demonstrate that strategic classical preprocessing combined with differentiable quantum architecture optimization can significantly enhance quantum neural network robustness while maintaining computational efficiency.

量子机器学习鲁棒性可微搜索

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。