{"id":"W2943955321","doi":"10.1103/physreva.101.062331","title":"Vulnerability of quantum classification to adversarial perturbations","year":2020,"lang":"en","type":"article","venue":"Physical review. A/Physical review, A","topic":"Quantum Information and Cryptography","field":"Computer Science","cited_by":79,"is_retracted":false,"has_abstract":true,"ca_institutions":"Vector Institute; Creative Destruction Lab; University of Toronto; Perimeter Institute","funders":"University of Waterloo; Gdański Uniwersytet Medyczny; University of Calgary","keywords":"Adversarial system; Vulnerability (computing); Quantum; Computer security; Computer science; Physics; Artificial intelligence; Quantum mechanics","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","insufficient_payload"],"consensus_categories":[],"category_scores_codex":[0.0004448279,0.0003309592,0.001089825,0.00005493512,0.0001153502,0.0000508084,0.001253162,0.00003157354,0.00003906216],"category_scores_gemma":[0.00179797,0.0002621975,0.0008061847,0.002288806,0.0001108157,0.0007396888,0.0002708035,0.0003450499,0.0008109765],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00004256844,"about_ca_system_score_gemma":0.0001260147,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000006548576,"about_ca_topic_score_gemma":3.758212e-7,"domain_scores_codex":[0.9968989,0.0003542538,0.0009097339,0.0006273421,0.00085965,0.0003501379],"domain_scores_gemma":[0.9972217,0.0003619021,0.0004372568,0.001041077,0.0004116971,0.0005263752],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001689717,0.0007020351,0.00008474153,0.006102081,0.00004492858,8.18313e-7,0.0007606996,0.00001520091,0.01493276,0.9039024,0.01514794,0.05828948],"study_design_scores_gemma":[0.0009562245,0.00146799,0.007590871,0.008639752,0.0005237979,0.000004206847,0.00004927182,0.5267186,0.008676329,0.08969898,0.3540256,0.001648359],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.06680621,0.01474388,0.8302583,0.07668231,0.0003659397,0.004054123,0.0000671106,0.0005048694,0.006517287],"genre_scores_gemma":[0.9673473,0.01201445,0.001617199,0.01840974,0.000311671,0.0002474199,0.00003070151,0.00001687746,0.000004608586],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9005411,"threshold_uncertainty_score":0.999983,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04159187513340428,"score_gpt":0.3675372983027574,"score_spread":0.3259454231693532,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}