← Directory

Adversarial Robustness Toolbox

Open Source
★ 6,289 • Updated Oct 27, 2026, 03:02 PM

The Adversarial Robustness Toolbox (ART) is a Python library for Machine Learning Security.

Use Cases ▼
01

Evaluating the security of Machine Learning models against adversarial threats

02

Improving the security of Machine Learning models using defences and estimators

03

Developing and testing new attacks and defences for Machine Learning models

04

Using Machine Learning models in security-critical applications, such as autonomous vehicles and medical diagnosis

What Problem It Solves ▼

The Adversarial Robustness Toolbox (ART) solves the problem of evaluating and improving the security of Machine Learning models against adversarial threats. Machine Learning models are vulnerable to a range of attacks, including Evasion, Poisoning, Extraction, and Inference, which can compromise their security and reliability. ART provides a comprehensive set of tools for evaluating and improving the security of Machine Learning models, enabling developers and researchers to defend against these threats and improve the overall security of their models. By using ART, developers and researchers can identify vulnerabilities in their models, evaluate the effectiveness of different defences, and improve the overall security of their models.

Key Features ▼
✓

Comprehensive set of tools for evaluating and improving the security of Machine Learning models

✓

Supports all popular machine learning frameworks and data types

✓

Wide range of examples and notebooks to help users get started

✓

Strong community of developers and users

Overview

The Adversarial Robustness Toolbox (ART) is a Python library for Machine Learning Security. It provides tools that enable developers and researchers to defend and evaluate Machine Learning models and applications against the adversarial threats of Evasion, Poisoning, Extraction, and Inference. ART supports all popular machine learning frameworks (TensorFlow, Keras, PyTorch, scikit-learn, XGBoost, LightGBM, CatBoost, GPy, etc.), all data types (images, tables, audio, video, etc.) and machine learning tasks (classification, object detection, speech recognition, generation, certification, etc.). The library is under continuous development and is hosted by the Linux Foundation AI & Data Foundation (LF AI & Data). ART is designed to be used by both Red and Blue Teams, providing a comprehensive set of tools for evaluating and improving the security of Machine Learning models. The library includes a range of features, including attacks, defences, estimators, and metrics, as well as a range of examples and notebooks to help users get started. ART is widely used in the field of Machine Learning Security and has been cited in numerous research papers. The library is open-source and is available on GitHub, where it has received over 6,000 stars and has been forked over 1,400 times. ART is licensed under the MIT License and is available for use in commercial and non-commercial applications. The library has a strong community of developers and users, with a Slack channel and a range of documentation and resources available to help users get started and contribute to the project. Overall, ART is a powerful and widely-used library for Machine Learning Security, providing a comprehensive set of tools for evaluating and improving the security of Machine Learning models.

Pros & Cons

Pros

+

Comprehensive set of tools for evaluating and improving the security of Machine Learning models

+

Supports all popular machine learning frameworks and data types

+

Wide range of examples and notebooks to help users get started

+

Strong community of developers and users

Cons

−

Steep learning curve due to the complexity of the library and the field of Machine Learning Security

−

Requires a strong background in Machine Learning and programming

−

Limited support for certain machine learning frameworks and data types

Similar Tools

TensorFlow Security Keras Security PyTorch Security

More in Model Serving