What will I get if I subscribe to this Specialization?

When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Adversarial AI: Attacking, Defending & Governing ML Systems

Adversarial AI: Attacking, Defending & Governing ML Systems

This course is part of AI-Powered Cybersecurity Specialization

Instructor: Matt Bushby

Included with

Learn more

5 modules

Gain insight into a topic and learn the fundamentals.

Intermediate level

Recommended experience

1 week to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

5 modules

Gain insight into a topic and learn the fundamentals.

Intermediate level

Recommended experience

1 week to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Analyse adversarial attack vectors targeting ML systems including poisoning, model stealing, & backdoor exploits, and assess their operational impact
Design & implement layered technical defences using differential privacy, guardrail protection, & secure algorithm design to maintain model integrity
Plan and conduct AI security testing using red, purple, and blue teaming approaches to validate ML model robustness under adversarial conditions
Evaluate responsible AI governance frameworks and regulatory requirements to ensure AI systems are ethical, fair, and compliant

Details to know

Shareable certificate

Add to your LinkedIn profile

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your subject-matter expertise

This course is part of the AI-Powered Cybersecurity Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

There are 5 modules in this course

As AI becomes central to cybersecurity defence, attackers are increasingly targeting the AI systems themselves. Model poisoning, adversarial inputs, backdoor exploits, and model stealing are active threats — and most security teams are unprepared to detect or defend against them. This course gives you the knowledge and practical strategies to secure ML systems from the inside out.

You'll examine how ML systems are manipulated through adversarial inputs, poisoning attacks, and threat models across real-world use cases including malware detection and fraud analytics. You'll then explore advanced attack vectors: model poisoning, information leakage, model stealing, and backdoor exploits, and assess their impact on data privacy, intellectual property, and user safety. From attack to defence, you'll learn to apply secure algorithm design, differential privacy, and guardrail protection — and conduct AI security testing using red, purple, and blue teaming approaches. The course closes with AI governance: responsible AI principles, bias mitigation, transparency, data ethics, and the global regulatory frameworks governing AI in cybersecurity. Designed for security analysts, ML engineers, security architects, and risk and compliance professionals working with AI-powered security systems. Job skills taught: Adversarial AI Defence · AI Security Testing · ML Threat Modelling · Model Robustness · Differential Privacy · Red/Blue/Purple Teaming · AI Governance · Responsible AI · Regulatory Compliance for AI

As machine learning integrates into cyber defences, so do methods for breaking it. This module helps you understand how machine learning systems are manipulated and how to defend against it. You will examine adversarial machine learning through examples of threat models, adversarial inputs, and poisoning attacks. Learn how data can compromise models and how attackers exploit vulnerabilities. This module also covers defensive techniques to build resilient models and implement countermeasures. Safeguard your models in malware detection, intrusion systems, or fraud analytics against sophisticated attacks.

What's included

1 assignment5 plugins

As AI systems deploy, exposure to adversarial threats and misuse increases. This module explores how AI is attacked and exploited, a critical focus for cyber professionals. You will dive into AI-specific attack vectors: model poisoning, information leakage, model stealing, and backdoor exploits. These threats compromise AI performance and pose risks to data privacy, intellectual property, and user safety. Examine harmful AI outputs from biased data or manipulation. Learn how output alignment, ethical censorship, and AI-powered surveillance affect public trust and legal compliance. Analyze case studies to identify AI vulnerabilities and understand societal consequences of insecure deployments. Ensure AI shapes the world securely and responsibly.

What's included

2 assignments6 plugins

Defending AI systems against emerging threats is critical. This module explores technical controls and testing strategies to secure AI models. You will learn to apply AI-specific defences, from secure algorithm design to privacy-preserving techniques like differential privacy. Examine how to test and validate AI model robustness using red, purple, and blue teaming approaches. Focus on balancing security, utility, and performance to make informed trade-offs. Gain practical skills to implement trusted controls and rigorously test for resilience against real-world threats, whether building or auditing AI systems.

What's included

2 assignments8 plugins

2 assignmentsTotal 30 minutes

End of module practice quiz15 minutes
End of module quiz15 minutes

8 pluginsTotal 112 minutes

Overview2 minutes
Introduction10 minutes
Defence techniques and strategies30 minutes
Defences for attacks on GenAI models20 minutes
Selecting appropriate controls15 minutes
Guardrail protection versus guardrail failure15 minutes
AI security testing and benchmarking15 minutes
Summary5 minutes

As AI systems grow, responsible design, deployment, and governance are imperative. This module introduces Responsible AI principles: fairness, bias mitigation, transparency, and ethical accountability. You will explore how AI decisions impact individuals and communities, navigating trade-offs between user privacy, model performance, and transparency. Unpack challenges like data sourcing, labelling, and ethical implications of large-scale models. Learn practical strategies for enhancing trust in AI systems. Dive into global frameworks, policies, and governance models supporting secure, ethical AI adoption. Ensure AI systems are functional, fair, transparent, and aligned with regulatory expectations.

What's included

2 assignments6 plugins

In this module, you will analyse a simulated adversarial attack on a deployed ML model, identify the attack type, and recommend a defence strategy. The project allows you to build a comprehensive portfolio artefacts demonstrating your end-to-end capabilities.

What's included

2 assignments

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

Instructor

Matt Bushby

Macquarie University

15 Courses20,616 learners

Offered by

Macquarie University

Explore more from Security

Macquarie University
Cyber Incident Response: Triage, Containment & Recovery
Course
Macquarie University
Machine Learning for Cyber Threat & Anomaly Detection
Course

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

Unlock access to 10,000+ courses with a subscription
Advance your career with an online degree
Earn a degree from world-class universities - 100% online
Join over 4,700 global companies that choose Coursera for Business

Frequently asked questions

Adversarial machine learning refers to techniques that manipulate, deceive, or exploit AI systems — for example, feeding corrupted training data to degrade model performance, or crafting inputs that cause a model to misclassify a threat. As AI is embedded deeper into security operations, understanding these attack techniques is essential for anyone building, deploying, or auditing AI-powered security tools.

You should have foundational machine learning knowledge and basic cybersecurity awareness before starting this course. Completing the first course in this Specialization — Machine Learning: Cyber Threat & Anomaly Detection — is the best preparation, as this course builds directly on those ML foundations.

Yes. The final module covers responsible AI principles, global governance frameworks, and regulatory compliance requirements — including considerations around fairness, bias, transparency, and data ethics — ensuring you can assess AI deployments against both technical and legal standards.

This course prepares you for roles at the intersection of AI and security — one of the fastest-growing areas in the industry. It is directly relevant to AI Security Engineer, Security Architect, and ML Security Researcher roles, where understanding adversarial attack surfaces and implementing model defences is a core responsibility. Penetration Testers and Red Team Analysts will gain skills in adversarial ML testing and benchmarking. Risk, Compliance, and Governance professionals responsible for overseeing AI deployments will benefit from the responsible AI and regulatory compliance content. It also strengthens the profile of SOC Analysts and Threat Intelligence Analysts who work with or audit AI-powered security tools.

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.