Quantum Anomaly Detection in network traffic using Variational Quantum Classifiers

Abstract

The increasingly complex cybersecurity landscape requires more advanced network anomaly detection systems. Although, classical machine learning models are known to be effective, they reach computational bottlenecks when processing high-dimensional data. This study investigates the potential of Quantum Machine Learning (QML) for network traffic anomaly detection by evaluating four distinct Variational Quantum Classifier (VQC) architectures. A synthetic network traffic dataset is generated for the evaluations. The VQC models systematically varied feature encoding methods, parameterized ansatz circuits, quantum neural network types, and classical optimizers. Experimental results show that a trade-off exists between circuit expressivity and optimization stability. Deeper circuits (VQC-4) achieved higher accuracy of upto 89.0\%, while simultaneously being sensitive to training conditions. A shallower variant (VQC-1) under performed, although it had consistent and stable optimization curves. Class-dependent biases were also observed such as in VQC-2, where the model struggled to find an effective decision boundary, and produced a large number of false negatives. The best performing model in this study (VQC-3) combined ZFeatureMap with RealAmplitudes ansatz, optimized using ADAM. Comparative analysis against classical machine learning models such as Support Vector Machine and Random Forest reveal a performance gap, where classical models are able to achieve perfect classification performance on the synthetic data. It is concluded that classical algorithms remain dominant in their ability to classify structured data with relatively simple class separations. However, due to the observed potential of certain VQC configurations to learn decision boundaries to classify data, their utility for future applications in noisier, higher-dimensional problems is highlighted.