标题： 量子锤：在超导量子计算机上远程引发量子比特状态变化 显示英文标题

标题： QubitHammer: Remotely Inducing Qubit State Change on Superconducting Quantum Computers

摘要： 为应对基于云的量子计算日益增长的需求，研究人员提出了从现有的单租户模型转向多租户模型，以扩大资源利用率并提高可访问性。 然而，虽然多租户允许多个用户访问同一台量子计算机，但会引入安全性和可靠性漏洞的潜在风险。 因此，研究这些漏洞变得尤为重要，特别是考虑到那些相对于普通用户没有提升权限的现实攻击者。 为满足这一研究需求，本文介绍了并评估了QubitHammer，这是第一个攻击，证明了攻击者可以通过使用在公共接口约束内生成的自定义量子比特控制脉冲，在不具有提升权限的情况下，在多租户模型中远程诱导受害者量子电路的量子比特状态的未经授权更改。 通过在IBM和Rigetti的真实世界超导设备上进行广泛评估，这项工作展示了QubitHammer使攻击者能够显著改变受害者量子电路的输出分布。 在实验中，使用变分距离来评估变化的大小，观察到的变分距离高达0.938。 对多个量子计算设备上的QubitHammer进行跨平台分析揭示了超导硬件中的根本性易受攻击性。 此外，还发现QubitHammer能够规避所有目前提出的旨在确保多租户超导量子系统可靠执行的防御措施。 显示英文摘要

摘要： To address the rapidly growing demand for cloud-based quantum computing, various researchers are proposing shifting from the existing single-tenant model to a multi-tenant model that expands resource utilization and improves accessibility. However, while multi-tenancy enables multiple users to access the same quantum computer, it introduces potential for security and reliability vulnerabilities. It therefore becomes important to investigate these vulnerabilities, especially considering realistic attackers who operate without elevated privileges relative to ordinary users. To address this research need, this paper presents and evaluates QubitHammer, the first attack to demonstrate that an adversary can remotely induce unauthorized changes to a victim's quantum circuit's qubit's state within a multi-tenant model by using custom qubit control pulses that are generated within constraints of the public interfaces and without elevated privileges. Through extensive evaluation on real-world superconducting devices from IBM and Rigetti, this work demonstrates that QubitHammer allows an adversary to significantly change the output distribution of a victim quantum circuit. In the experimentation, variational distance is used to evaluate the magnitude of the changes, and variational distance as high as 0.938 is observed. Cross-platform analysis of QubitHammer on a number of quantum computing devices exposes a fundamental susceptibility in superconducting hardware. Further, QubitHammer was also found to evade all currently proposed defenses aimed at ensuring reliable execution in multi-tenant superconducting quantum systems.