Thursday 11:35
in Palladium
- Introduction
- Motivation
- What can go wrong
- Generative AI vs Traditional Applications
- Key differences in security considerations
- Unique challenges posed by generative AI
- Threat Modeling Basics and AI-Specific Threats
- STRIDE framework
- Focus on prompt injection and data poisoning
- Example: Simple prompt injection attempt
- Practical Threat Modeling Process
- Simplified system decomposition example
- Threat identification walkthrough
- Example: Input Validation
- Tools Showcase and Mitigation Strategies
- AI security tools applicable
- Best practices for API security
- Conclusion and Resources
- Recap key takeaways
- List of recommended tools and further reading
