~/talk

Introduction to AI Security

Talkat NDC AI 2025 · 2025-11-11..11-13· [security, machine-learning]
slides:none on file

Claims that prompt injection is the primary, novel attack on LLMs and that frontier models are routinely bypassed; demonstrates exploits that steal system prompts and user data, and shows a validator approach reaching about 99% block rate by combining fast regex layers, an LLM-based sandbox validator (examples use NVIDIA Nemo Guardrails), WASM sandboxes, tenant isolation or per-customer models, Cloudflare-style honey pages for web scraping, and iterative red‑teaming plus jailbreak datasets (Hugging Face, TextAttack) to harden defenses.

AI-written summary · about

  1. 0:00AI security risks
  2. 10:59Prompt injection attacks
  3. 27:28Indirect prompt injection
  4. 35:14Defending with AI validators
  5. 48:21Data exposure and filtering
  6. 56:19Access control challenges
  7. 1:00:13Secure open-source models
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.