防止讨厌的快速注射攻击

Preventing Pesky Prompt Injection AttacksLisa RaykowskiOctober 8, 20249/26/2024Preventing Pesky Prompt Injection Attacks2Disclaimer•The views expressed by the presenter are not necessarily those of Ernst & Young LLP or other member of the global EY organization.•These slides are for educational purposes only and are not intended to be relied upon as accounting, tax, legal or other professional advice. Please refer to your advisors for specific advice.9/26/2024Preventing Pesky Prompt Injection Attacks3ContentsIntro04What is prompt injection?05A little history07Key terms084 types of prompt injection attacks09Alarming success rate10What should keep you up at night?11Is your intelligent-like application at risk?12Real-world attack scenarios13Key mitigations and protections14Test your skills15Questions?169/26/2024Preventing Pesky Prompt Injection Attacks4IntroCybersecurity senior manager, Ernst & Young LLP •Software engineer on (semipermanent) hiatus from writing code•Application security f