Tooling
-
Adversarial Attack Libraries: ART, Foolbox, torchattacks
ART, Foolbox, torchattacks, CleverHans and TextAttack compared on scope, framework support, attack coverage, licence and repository maintenance.
-
Adversarial ML Testing Tools: ART, ModelScan, Giskard
Which tools red-team a classical ML model: ART for evasion and poisoning, ModelScan for model files, Giskard as a CI gate, mapped to the attack surface.
-
Evaluating Adversarial Robustness Without Fooling Yourself
Most defenses that claim robustness are later broken — not because the idea was bad, but because the evaluation was. Adaptive attacks are non-negotiable.