[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-120026-en":3,"doc-seo-120026-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},120026,4398048950312,"Violet","https://ap-avatar.wpscdn.com/avatar/400002538284de19e3c?_k=1778320343897328908",8,"Research & Report","VeriQR - A Robustness Verification Tool for Quantum Machine Learning Models - Early Version","Adversarial noise attacks pose a serious threat to quantum machine learning (QML) models, especially in the Noisy Intermediate-Scale Quantum (NISQ) era where noise is unavoidable. VeriQR is introduced as a formal verification tool tailored to QML robustness, simulating real hardware noise by injecting random noise. It offers sound and complete algorithms for both local and global robustness, including an under-approximate approach and a tensor-network method. The tool detects adversarial examples, supports adversarial training to improve local robustness, and allows customized noise, with experiments on real-world QML models and a user-friendly graphical interface.","Edinburgh Research Explorer  \nVeriQR  \nA robustness verification tool for quantum machine learning models  \nCitation for published version:  \nLin, Y, Guan, J, Fang, W, Ying, M & Su, Z 2024 'VeriQR: A robustness verification tool for quantum machine learning models' ArXiv, pp. 1-18. [https://doi.org/10.48550/arXiv.2407.13533](https://doi.org/10.48550/arXiv.2407.13533)  \nDigital Object Identifier (DOI):  \n10.48550/arXiv.2407.13533  \nLink:  \nLink to publication record in Edinburgh Research Explorer  \nDocument Version:  \nEarly version, also known as pre-print  \nGeneral rights  \nCopyright for the publications made accessible via the Edinburgh Research Explorer is retained by the author(s) and / or other copyright owners and it is a condition of accessing these publications that users recognise and abide by the legal requirements associated with these rights.  \nTake down policy  \nThe University of Edinburgh has made every reasonable effort to ensure that Edinburgh Research Explorer content complies with UK legislation. If you believe that the public display of this file breaches copyright please [contact openaccess@ed.ac.uk](contact openaccess@ed.ac.uk) providing details, and we will remove access to the work immediately and investigate your claim.  \nDownload date: 03. Oct. 2024  \nVeriQR: A Robustness Verification Tool for Quantum Machine Learning Models  \nYanling Lin 1 ,2 , Ji Guan2 (B) ⋆ , Wang Fang2 , Mingsheng Ying3 ,  \nZhaofeng Su 1 (B) ⋆⋆   \narXiv :2407 . 13533v1 [ quant-ph] 18 Jul 2024  \n1  \n2  \nUniversity of Science and Technology of China, Hefei 230026, China Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China  \n3 Centre for Quantum Software and Information, University  \nof Technology Sydney, NSW 2007, Australia  \nAbstract. Adversarial noise attacks present a significant threat to quantum machine learning (QML) models, similar to their classical counterparts. This is especially true in the current Noisy Intermediate-Scale Quantum era, where noise is unavoidable. Therefore, it is essential to ensure the robustness of QML models before their deployment. To address this challenge, we introduce VeriQR, the first tool designed specifically for formally verifying and improving the robustness of QML models, to the best of our knowledge. This tool mimics real-world quantum hardware’s noisy impacts by incorporating random noise to formally validate a QML model’s robustness. VeriQR supports exact (sound and complete) algorithms for both local and global robustness verification. For enhanced efficiency, it implements an under-approximate (complete) algorithm and a tensor network-based algorithm to verify local and global robustness, respectively. As a formal verification tool, VeriQR can detect adversarial examples and utilize them for further analysis and to enhance the local robustness through adversarial training, as demonstrated by experiments on real-world quantum machine learning models. Moreover, it permits users to incorporate customized noise. Based on this feature, we assess VeriQR using various real-world examples, and experimental outcomes confirm that the addition of specific quantum noise can enhance the global robustness of QML models. These processes are made accessible through a user-friendly graphical interface provided by VeriQR, catering to general users without requiring a deep understanding of the counter-intuitive probabilistic nature of quantum computing.  \nThe source code of VeriQR is available at [https://github.com/Veri-Q/](https://github.com/Veri-Q/)[ ](https://github.com/Veri-Q/)VeriQR, while the artifact for reproducing the experiments of this paper is available at [29] .  \nKeywords: Robustness Verification · Quantum Machine Learning · Formal Verification ·Quantum Classifiers · Quantum Noise  \n⋆  \n⋆⋆  \n[guanj@ios.ac.cn](guanj@ios.ac.cn)[ ](guanj@ios.ac.cn)[zfsu@ustc.edu.cn](z","cbCainTrhdQ6JU1L","https://ap.wps.com/l/cbCainTrhdQ6JU1L","pdf",1732860,1,19,"English","en",105,"# Abstract\n# Keywords\n# 1 Introduction","[{\"question\":\"What problem does VeriQR address for quantum machine learning models?\",\"answer\":\"VeriQR addresses the threat of adversarial noise attacks to QML models, which is especially critical in the NISQ era where noise cannot be avoided.\"},{\"question\":\"How does VeriQR model the noise affecting quantum hardware?\",\"answer\":\"VeriQR mimics real-world quantum hardware impacts by incorporating random noise to formally validate a QML model’s robustness.\"},{\"question\":\"What robustness checks does VeriQR support?\",\"answer\":\"VeriQR supports both local and global robustness verification with sound and complete algorithms, using an under-approximate method for local robustness and a tensor-network-based method for global robustness.\"}]","VeriQR - A Robustness Verification Tool for Quantum Machine Learning Models - Early Version | PDF",1785727787,48,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"veriqr-a-robustness-verification-tool-for-quantum-machine-learning-models-early-version","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/veriqr-a-robustness-verification-tool-for-quantum-machine-learning-models-early-version/120026/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-03",true,{"@type":65,"interactionType":66,"userInteractionCount":20},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What problem does VeriQR address for quantum machine learning models?","Question",{"text":75,"@type":76},"VeriQR addresses the threat of adversarial noise attacks to QML models, which is especially critical in the NISQ era where noise cannot be avoided.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"How does VeriQR model the noise affecting quantum hardware?",{"text":80,"@type":76},"VeriQR mimics real-world quantum hardware impacts by incorporating random noise to formally validate a QML model’s robustness.",{"name":82,"@type":73,"acceptedAnswer":83},"What robustness checks does VeriQR support?",{"text":84,"@type":76},"VeriQR supports both local and global robustness verification with sound and complete algorithms, using an under-approximate method for local robustness and a tensor-network-based method for global robustness.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":46,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":21,"doc_module":4,"doc_module_name":46,"category_name":136,"show_sort_weight":106,"slug":137},"General","general"]