On the Figures of Merit for Quantum Software Security: Toward a Benchmarking Rubric

📅 2026-08-06
📈 Citations: 0
Influential: 0
📄 PDF
🤖 AI Summary
This study addresses the absence of a unified, quantifiable framework for evaluating quantum software security, as existing approaches are fragmented and incompatible. To bridge this gap, the work proposes a novel, hierarchical framework that integrates ISO/IEC 25010 security subcharacteristics with the Quantum-as-a-Service (QaaS) pipeline to construct Security Figures of Merit (S-FoMs)—metrics that are comparable, composable, and standardized. A comprehensive Quantum Software Security Posture (QSSP) score is defined through security modeling, multidimensional classification, normalization, and reanalysis of obfuscation techniques. The framework establishes standardized benchmarking rules and demonstrates, through practical case studies, its feasibility and effectiveness in enabling consistent, quantitative assessment of quantum software security.
📝 Abstract
Quantum software is increasingly provided through multi-tenant and cloud-based Quantum-as-a-Service (QaaS) stacks. A growing concern about the diverse attack vectors across the pipeline has been demonstrated in recent research. Yet the community has converged on three mature pillars: Scale (Qubit Count), Quality (Quantum Volume), and Speed (Circuit Layer Operations per Second (CLOPS)) for the merit performance figures. Moreover, it has also begun to define software-quality metrics. However, the security of quantum software remains largely unmeasured. A few quantitative security indicators, such as Total Variation Distance (TVD) and Degree of Functional Corruption (DFC), exist. Although they were introduced ad hoc for individual circuit obfuscation techniques, they are incompatible. We assert that the security of quantum software deserves the same attention as the performance: an explicit set of Security Figures of Merit (S-FoMs). The research of this paper is threefold: (i) characterizes a three-layer measurement gap, (ii) proposes a structured S-FoM set organized by ISO/IEC 25010 security sub-characteristics, QaaS pipeline mapping, and measurement maturity, and (iii) defines a benchmarking rubric that normalizes and aggregates S-FoMs into a combined Quantum Software Security Posture (QSSP) score. Additionally, an illustrative reanalysis of published obfuscation techniques has been presented. Our aim is a first step toward security-aware benchmarking of the Quantum Software Stack (QSS).
Problem

Research questions and friction points this paper is trying to address.

Quantum Software Security
Security Figures of Merit
Benchmarking
QaaS
Quantum Software Stack
Innovation

Methods, ideas, or system contributions that make the work stand out.

Security Figures of Merit
Quantum Software Security
Benchmarking Rubric
QaaS
Quantum Software Security Posture
🔎 Similar Papers
No similar papers found.