{"id":"https://openalex.org/W7162689126","doi":"https://doi.org/10.48550/arxiv.2605.27416","title":"Can Quantum Federated Learning Withstand Circuit-Level Backdoors?","display_name":"Can Quantum Federated Learning Withstand Circuit-Level Backdoors?","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7162689126","doi":"https://doi.org/10.48550/arxiv.2605.27416"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.27416","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.27416","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.27416","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114214473","display_name":"Aakar Mathur","orcid":"https://orcid.org/0009-0009-5192-387X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mathur, Aakar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137279205","display_name":"Mohammed Ruknuddin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ruknuddin, Mohammed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137243136","display_name":"Ashish Gupta","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gupta, Ashish","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10682","display_name":"Quantum Computing Algorithms and Architecture","score":0.39730000495910645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10682","display_name":"Quantum Computing Algorithms and Architecture","score":0.39730000495910645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10020","display_name":"Quantum Information and Cryptography","score":0.08470000326633453,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.08349999785423279,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.8888000249862671},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.6837000250816345},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6625999808311462},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5504999756813049},{"id":"https://openalex.org/keywords/smoothness","display_name":"Smoothness","score":0.44920000433921814},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.3984000086784363}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.8888000249862671},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7069000005722046},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.6837000250816345},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6625999808311462},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5504999756813049},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5254999995231628},{"id":"https://openalex.org/C102634674","wikidata":"https://www.wikidata.org/wiki/Q868473","display_name":"Smoothness","level":2,"score":0.44920000433921814},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3984000086784363},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.36329999566078186},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C84114770","wikidata":"https://www.wikidata.org/wiki/Q46344","display_name":"Quantum","level":2,"score":0.3465000092983246},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3409999907016754},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2896000146865845},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2800999879837036},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2757999897003174},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2630999982357025}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.27416","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.27416","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.27416","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.27416","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7657544016838074,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Quantum":[0],"Federated":[1],"Learning":[2],"(QFL)":[3],"inherits":[4],"the":[5,67,86,150],"core":[6],"vulnerability":[7],"of":[8,97],"federated":[9],"optimization":[10],"to":[11,76,132,141,162],"malicious":[12,54,98,105,153],"clients,":[13],"while":[14],"also":[15],"introducing":[16],"an":[17],"attack":[18,78],"surface":[19],"from":[20],"variational":[21],"circuit":[22],"training":[23],"and":[24,50,59,88,94,123],"measurement-driven":[25],"gradients.":[26],"This":[27],"work":[28],"proposes":[29],"a":[30,72,103],"novel":[31],"CircUit-Level":[32],"backdoor":[33],"Threat":[34],"(CULT)":[35],"model":[36],"that":[37,101,148],"formalizes":[38],"four":[39],"stealthy":[40],"attacks":[41,63],"by":[42,159],"exploiting":[43],"quantum-aware":[44],"mechanisms,":[45],"including":[46,118],"Grover,":[47],"Pauli,":[48],"Bit-flip,":[49],"Sign-flip.":[51],"By":[52],"enabling":[53],"clients":[55,99],"on":[56,85],"both":[57],"in-training":[58],"post-training":[60],"surfaces,":[61],"these":[62],"can":[64,107],"critically":[65],"undermine":[66],"learning":[68],"process.":[69],"We":[70],"establish":[71],"rigorous":[73],"theoretical":[74],"foundation":[75],"demonstrate":[77],"stealthiness":[79],"under":[80,112,149],"standard":[81],"smoothness":[82],"assumptions.":[83],"Experiments":[84],"MNIST":[87],"CIFAR-10":[89],"datasets":[90],"with":[91],"non-IID":[92],"splits":[93],"varying":[95],"fractions":[96],"show":[100],"even":[102],"single":[104],"client":[106],"induce":[108],"severe":[109],"accuracy":[110,138],"degradation":[111,126],"FedAvg":[113],"aggregation.":[114],"While":[115],"popular":[116],"defenses,":[117],"Krum,":[119],"Multi-Krum,":[120],"FoolsGold,":[121],"FLGuardian,":[122],"Mud-HoG,":[124],"reduce":[125],"in":[127],"many":[128],"regimes,":[129],"they":[130],"fail":[131],"eliminate":[133],"worst-case":[134],"failure":[135],"cases,":[136],"where":[137],"drops":[139],"up":[140],"50\\%.":[142],"The":[143],"experimental":[144],"analysis":[145],"further":[146],"reveals":[147],"CULT":[151],"model,":[152],"updates":[154],"effectively":[155],"mask":[156],"their":[157],"presence":[158],"staying":[160],"close":[161],"benign":[163],"norms,":[164],"thereby":[165],"helping":[166],"attackers":[167],"evade":[168],"detection.":[169]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-29T00:00:00"}