RobQFL: Robust Quantum Federated Learning in Adversarial Environment
This addresses robustness in quantum federated learning for privacy-sensitive applications, but it is incremental as it adapts existing adversarial training methods to a quantum federated setting.
The paper tackles the vulnerability of Quantum Federated Learning (QFL) to adversarial noise, showing it is as fragile as centralized quantum learning, and proposes RobQFL with adversarial training to improve robustness, achieving up to ~15 percentage point accuracy gains at low perturbation levels with minimal clean-accuracy cost.
Quantum Federated Learning (QFL) merges privacy-preserving federation with quantum computing gains, yet its resilience to adversarial noise is unknown. We first show that QFL is as fragile as centralized quantum learning. We propose Robust Quantum Federated Learning (RobQFL), embedding adversarial training directly into the federated loop. RobQFL exposes tunable axes: client coverage $γ$ (0-100\%), perturbation scheduling (fixed-$\varepsilon$ vs $\varepsilon$-mixes), and optimization (fine-tune vs scratch), and distils the resulting $γ\times \varepsilon$ surface into two metrics: Accuracy-Robustness Area and Robustness Volume. On 15-client simulations with MNIST and Fashion-MNIST, IID and Non-IID conditions, training only 20-50\% clients adversarially boosts $\varepsilon \leq 0.1$ accuracy $\sim$15 pp at $< 2$ pp clean-accuracy cost; fine-tuning adds 3-5 pp. With $\geq$75\% coverage, a moderate $\varepsilon$-mix is optimal, while high-$\varepsilon$ schedules help only at 100\% coverage. Label-sorted non-IID splits halve robustness, underscoring data heterogeneity as a dominant risk.