用量子生成器模拟恶意网络流量,提升攻击隐蔽性并测试传统防御系统。
Hybrid Quantum-Classical GANs for the Generation of Adversarial Network Flows

- 量子生成器将潜在特征编码为量子态,减少计算开销并增强表达能力。
- 生成的流量可绕过随机森林与卷积神经网络等经典检测模型,成功率超90%。
- 适用于研究量子攻击对现有安全系统的威胁,适合安全防御研究人员。
经典生成对抗网络(GAN)已被用于生成可攻击入侵检测系统(IDS)的恶意网络流量,但存在依赖大规模高维数据、模式崩溃和高计算开销等问题。本文提出一种混合量子-经典生成对抗网络(QC-GAN)框架,采用变分量子生成器,将潜在向量(隐藏特征)编码为量子态,生成模仿恶意流量的合成网络流。经典判别器在真实数据集UNSW-NB15和生成的假流量上进行训练。生成器力求降低判别器区分真假流量的能力,判别器则最大化分类准确率,二者迭代优化。实验中,使用随机森林和基于卷积神经网络的分类器测试生成流量的绕过能力。结果表明,该方法可在有限量子算力下实现高效攻击,且受硬件噪声影响显著。本工作揭示了量子机器学习在生成高级攻击流量中的潜力,并强调构建抗量子防御系统的重要性。
原文摘要 · Abstract (English)
Classical generative adversarial networks (GANs) have been applied to generate adversarial network traffic capable of attacking intrusion detection systems, but they suffer from shortcomings such as the need for large amounts of high-dimensional datasets, mode collapse, and high computational overhead. In this work, we propose a hybrid quantum-classical GAN (QC-GAN) framework where a variational quantum generator is used to generate synthetic network traffic flows mimicking malicious traffic using latent representations. Instead of sampling classical noise vectors, we encode the latent vector (the hidden features) as a quantum state, which is the basis for claiming more expressive latent representations and reducing computational overhead. A classical discriminator will be trained on real-world datasets (UNSW-NB15) and the proposed QC-GAN-generated fake network flows. In this configuration, the generator aims to minimize the discriminator's ability to distinguish real from fake traffic, while the discriminator aims to maximize its classification accuracy, in an iterative manner. In our attack model, we assume that the attacker is a state actor with access to limited quantum computing power, whereas the discriminator is chosen to be classical, as will likely be the case for most end users and organizations. We test the generated flows using classical intrusion detection system (IDS) models, such as a random forest classifier and a convolutional neural network-based classifier, for their ability to bypass the detection process. This work aims to highlight the possibilities of quantum machine learning as a means of generating advanced attack flows and stress testing classical IDS. Lastly, we further evaluate how hardware-based noise affects these attacks to offer a new perspective on IDS, highlighting the need for a quantum resilient defense system.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。