Testing techniques to evaluate AI system resilience against evasion attacks, where an adversary manipulates inputs to bypass detection, classification, or security controls. Includes adversarial examples, imperceptible perturbations, prompt injection, jailbreak, and other strategies to circumvent model defenses without altering internal structure.