Securing the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs
summary
Walks through concrete attacks and defenses with live demos and tools: uses exploit DB and CVE/NIST checks for reconnaissance, Nmap for port discovery, and OWASP ZAP for automated scans; claims 90% of security incidents occur at the application layer. Details LLM-specific failures — prompt injection, jailbreaks, data poisoning — and practical defenses: grounding via vector DB/RAG, data masking, guardrails, toxicity detection, audit trails, fuzz testing (OSS-Fuzz findings), canary deployments and DAGed multi-agent pipelines.
AI-written summary · about
chapters (8)
- 0:00Introduction to security challenges
- 7:04OWASP Top 10 for LLMs
- 12:27Prompt security and injection risks
- 29:45Defense mechanisms for LLMs
- 34:00Q&A on LLM security
- 46:19CI/CD and testing for LLMs
- 55:44API and vulnerability testing
- 58:42Closing and Q&A
related talks
28mSecuring LLMs: Insights into OWASP top 10
45mTop 10 That Actually Matter: Web, API, Mobile and LLM
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
57mThe Developer's Field Guide to Software Security
23mWeb Application Security - owasp top 10 vulnerabilities
01h 00mLandmines in the API Landscape
38mFree security resources that your competitors use!
59mPractical Security for Web Applications