Machine learning (ML) models are susceptible to various risks to security, privacy, and fairness. Most defenses are designed to protect against each risk individually (intended interactions) but can inadvertently affect susceptibility to other unrelated risks (unintended interactions). We introduce Amulet, the first Python library for evaluating both intended and unintended interactions among ML defenses and risks. Amulet is comprehensive by including representative attacks, defenses, and metrics; extensible to new modules due to its modular design; consistent with a user-friendly API template for inputs and outputs; and applicable for evaluating novel interactions. By satisfying all four properties, Amulet offers a unified foundation for studying how defenses interact, enabling the first systematic evaluation of unintended interactions across multiple risks.
@article{arxiv.2509.12386,
title = {Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks},
author = {Asim Waheed and Vasisht Duddu and Rui Zhang and Sebastian Szyller},
journal= {arXiv preprint arXiv:2509.12386},
year = {2025}
}