Quantum Data Breach: Reusing Training Dataset by Untrusted Quantum Clouds
Suryansh Upadhyay, Swaroop Ghosh

TL;DR
This paper reveals that untrusted quantum cloud providers can extract training data from QML models, enabling data reuse or theft, and proposes countermeasures to protect training data privacy.
Contribution
It introduces techniques for extracting training data from QML models in untrusted quantum clouds and proposes methods to mitigate this privacy risk.
Findings
Approximately 90% of labels can be accurately extracted.
Models trained on extracted data achieve about 90% accuracy.
Label obfuscation reduces adversarial label prediction accuracy by around 70%.
Abstract
Quantum computing (QC) has the potential to revolutionize fields like machine learning, security, and healthcare. Quantum machine learning (QML) has emerged as a promising area, enhancing learning algorithms using quantum computers. However, QML models are lucrative targets due to their high training costs and extensive training times. The scarcity of quantum resources and long wait times further exacerbate the challenge. Additionally, QML providers may rely on a third-party quantum cloud for hosting the model, exposing the models and training data. As QML-as-a-Service (QMLaaS) becomes more prevalent, reliance on third party quantum clouds can pose a significant threat. This paper shows that adversaries in quantum clouds can use white-box access of the QML model during training to extract the state preparation circuit (containing training data) along with the labels. The extracted…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsBig Data and Business Intelligence
