Doctoral Researcher · Quantum software security

Badhon Rahman

Where the quantum software stack breaks, and how to make it secure.

Faculty of Information Technology · University of Jyväskylä · Finland

Read the researchPublications
Three-qubit circuit crossing a trust boundaryThree qubit wires start on the client side with Hadamard and X gates, cross a dashed amber trust boundary into the provider side, pass a CNOT, a padlock gate and a Z gate, and end in three measurements. Glowing pulses travel along the wires from left to right.trust boundary|0⟩|0⟩|0⟩HXZ
compilation and shared hardware sit past the trust boundary

Research in one minute

Three questions, three papers

What can go wrong

Four families of attacks on the quantum stack

4 families → 14 classes

Crosstalk, side-channel, fault injection and pulse-level attacks, broken down into fourteen classes with their origin, consequences and known specimens.

Read more

Where it happens

The Quantum-as-a-Service pipeline

6 stages · 1 trust boundary

From the developer's environment to the hybrid loop, with a STRIDE threat model across every stage. Compilation and shared hardware sit outside the user's control.

Read more

How to measure and fix it

Security figures of merit and mitigations

13 S-FoMs → 1 QSSP score

Thirteen security figures of merit, normalised and aggregated into one posture score, and thirty-plus mitigations mapped to the attack families.

Read more

The path so far

One qubit, three gates, one pending measurement

one qubit · 3 gates · one pending measurement

The path so far, as a quantum circuitCareer drawn as a one-qubit circuit: Software Engineer at industry; Software Engineering at LUT University; Doctoral Researcher at University of Jyväskylä. Doctorate: measurement pending.|0⟩SWESoftware EngineerindustryM.Sc.Software EngineeringLUT UniversityPh.D.Doctoral ResearcherUniversity of JyväskyläDr.measurement pending

Contact

Get in touch

Questions about a paper, a tool, or quantum software security in general are always welcome.

badhon.b.rahman@jyu.fiORCIDLinkedInGitHubStack Overflow