{"id":"W2943955321","doi":"10.1103/physreva.101.062331","title":"Vulnerability of quantum classification to adversarial perturbations","year":2020,"lang":"en","type":"article","venue":"Physical review. A/Physical review, A","topic":"Quantum Information and Cryptography","field":"Computer Science","cited_by":79,"is_retracted":false,"has_abstract":true,"ca_institutions":"Vector Institute; Creative Destruction Lab; University of Toronto; Perimeter Institute","funders":"University of Waterloo; Gdański Uniwersytet Medyczny; University of Calgary","keywords":"Adversarial system; Vulnerability (computing); Quantum; Computer security; Computer science; Physics; Artificial intelligence; Quantum mechanics","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004316825,0.0004223931,0.001027453,0.000765141,0.001071839,0.001921064,0.001025609,0.002370432,0.002124882],"category_scores_gemma":[0.01956753,0.0004028466,0.0007505775,0.000605273,0.004428969,0.003110155,0.003491185,0.002760188,0.0004402085],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001824325,"about_ca_system_score_gemma":0.0008817221,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0008275775,"about_ca_topic_score_gemma":0.000266163,"domain_scores_codex":[0.9964876,0.001248471,0.000121275,0.0004660514,0.001116393,0.0005602268],"domain_scores_gemma":[0.9817675,0.0117324,0.00170199,0.003668439,0.000766873,0.0003629873],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005933407,0.0001127773,0.003981205,0.0002266637,0.0002002282,0.0005004355,0.0003254462,0.3462782,0.019838,0.5904921,0.004479353,0.03297225],"study_design_scores_gemma":[0.00003352177,0.0001169861,0.001762601,0.00005571885,0.00003126445,0.0003434556,0.00007882415,0.6131238,0.009119365,0.3724621,0.002814475,0.00005785948],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.507228,0.002253987,0.4406745,0.01043489,0.0004597873,0.0001623386,0.0004271537,0.0008241766,0.03753528],"genre_scores_gemma":[0.9901603,0.0005167841,0.007081915,0.0003729985,0.00008461118,0.00004199597,0.00006722171,0.00004087481,0.001633362],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.004316825,"threshold_uncertainty_score":0.02282983,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04159187513340428,"score_gpt":0.3675372983027574,"score_spread":0.3259454231693532,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}