مشهد تهديدات LLM

في هذا الدرس

name the main LLM application risks and where they sit in the system.

الموضوعات المخطط لها

• The OWASP Top 10 for LLM Applications lists risks such as prompt injection, sensitive information disclosure, improper output handling, excessive agency, system prompt leakage, vector and embedding weaknesses, and unbounded consumption. Verify the current edition and numbering before recording.
• Root cause: the model cannot reliably tell instructions from data.
• Treat the model as an untrusted component inside your system.
• Add the assistant to the STRIDE model from MID-052: user input, retrieved content, tools, output, and cost are all flows.