The Developer’s Playbook for Large Language Model Security: Building Secure AI Applications
Author: by Steve Wilson (Author)
Publisher finelybook 出版社: O’Reilly Media
Edition 版次: 1st
Publication Date 出版日期: 2024-10-15
Language 语言: English
Print Length 页数: 200 pages
ISBN-10: 109816220X
ISBN-13: 9781098162207
Book Description
Large language models (LLMs) are not just shaping the trajectory of AI, they’re also unveiling a new era of security challenges. This practical book takes you straight to the heart of these threats. Author Steve Wilson, chief product officer at Exabeam, focuses exclusively on LLMs, eschewing generalized AI security to delve into the unique characteristics and vulnerabilities inherent in these models.
Complete with collective wisdom gained from the creation of the OWASP Top 10 for LLMs list—a feat accomplished by more than 400 industry experts—this guide delivers real-world guidance and practical strategies to help developers and security teams grapple with the realities of LLM applications. Whether you’re architecting a new application or adding AI features to an existing one, this book is your go-to resource for mastering the security landscape of the next frontier in AI.
You’ll learn:
- Why LLMs present unique security challenges
- How to navigate the many risk conditions associated with using LLM technology
- The threat landscape pertaining to LLMs and the critical trust boundaries that must be maintained
- How to identify the top risks and vulnerabilities associated with LLMs
- Methods for deploying defenses to protect against attacks on top vulnerabilities
- Ways to actively manage critical trust boundaries on your systems to ensure secure execution and risk minimization
About the Author
Steve is the author of “Java Platform Performance: Strategies and Tactics” and “The Father/Daughter Guide to Cryptocurrency Mining” series. He is a popular speaker on future of work and artificial intelligence topics and has recently presented at RSA, The Churchill Club, Silicon Valley Leadership Group, DLA Piper Global Technology Summit, IDG Agenda, SAP TechEd and WSJ Tech D.Live.
