LLM Security in Practice: A Checklist and the Mindset Behind It
The whole series as a checklist, plus the one habit that generates it: assume the model is compromised, and design so that assumption is survivable.
LLM and Agent Security06
Subject · 4 posts
agents
The Agent's Blast Radius: Giving a Confused Deputy Hands
A chatbot that is wrong is embarrassing. An agent that is wrong took an action. The security of a tool-calling agent is the security of what you connected it to.
LLM and Agent Security03
Prompt Injection: Direct, Indirect, and Why Filtering Fails
The signature attack on language models. How instructions hide in the text a model reads, why you cannot filter your way out, and what containment looks like.
LLM and Agent Security02
Why AI Security Is a New Problem: The Model Has No Data Channel
Every security bug in the last series was data mistaken for code. A language model makes that its whole way of working: to it, all text is instructions.
LLM and Agent Security01