Threat modeling LLM apps
· 55 min · Episode 283
Episode Threat modeling LLM apps
If you have questions at the intersection of Cybersecurity and AI, you need to know Donato at WithSecure! Donato has been threat modeling AI applications and seriously applying those models in his day-to-day work. He joins us in this episode to discuss his LLM application security canvas, prompt injections, alignment, and more.
Sponsors:
• Assembly AI – Turn voice data into summaries with AssemblyAI’s leading Speech AI models. Built by AI experts, their Speech AI models include accurate speech-to-text for voice data (such as calls, virtual meetings, and podcasts), speaker detection, sentiment analysis, chapter detection, PII redaction, and more. • Porkbun – Go to porkbun.com to get .app, .dev, or .foo domain names at Porkbun for only $1 for the first year! • Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
Featuring:
• Donato Capitella – Website • Daniel Whitenack – Website, GitHub, X
Show Notes:
• The Security Canvas for LLM Applications • LLM Security Chronicles Playlist on YouTube • Should you let ChatGPT control your browser? • When your AI assistant has an evil twin • Pliny the Liberator - jailbreak guru
Upcoming Events:
• Register for upcoming webinars here!
Links in the notes 13
- https://www.assemblyai.com/?utm_source=practicalai&utm_medium=podcast
- https://porkbun.com/PracticalAI24
- https://changelog.com/news
- https://llm-chronicles.com
- https://www.datadan.io/
- https://github.com/dwhitena
- https://x.com/dwhitena
- https://www.withsecure.com/en/solutions/consulting/generative-ai-security
- https://www.youtube.com/playlist?list=PLNg09XqZv0dHVDw7OiiRQJ315HnGHbDbG
- https://labs.withsecure.com/publications/browser-agents-llm-prompt-injection
- https://labs.withsecure.com/publications/gemini-prompt-injection
- https://x.com/elder_plinius
- https://practicalai.fm/webinars
Chapters
Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.