2-7-7. Hallucinations and Reliability: Managing Confident Errors

This chapter examines prompt injection and jailbreak attacks, which exploit a language model's inherent inability to distinguish between authoritative developer instructions and untrusted user data. It covers the mechanics of direct and indirect injection, categorises common jailbreaking techniques, discusses the limitations of defensive prompt engineering, and outlines a layered mitigation strategy to better defend production systems. Amazon.com: LLM Primer VII AI Security: Defending LLM Systems Against Prompt Injection, Jailbreaks, and Adversarial Threats: 9798185644065: SHIMODA, SHO: Books

This chapter examines data security and privacy throughout the LLM lifecycle. It explores the inherent risks of training data, such as copyright issues, personal information (PII) contamination, and data poisoning. Additionally, it details how models can leak sensitive information through memorization and extraction attacks, and outlines operational defenses for securing systems, including input redaction pipelines, encryption, tenant isolation, and data retention policies. Amazon.com: LLM Primer VII AI Security: Defending LLM Systems Against Prompt Injection, Jailbreaks, and Adversarial Threats: 9798185644065: SHIMODA, SHO: Books

This chapter adapts traditional threat modeling frameworks (such as STRIDE, PASTA, and attack trees) specifically for the unique vulnerabilities of LLM systems. It guides defenders through identifying AI-specific assets and adversaries, and provides a step-by-step procedure for building a living threat model that can be maintained alongside the system's codeAmazon.com: LLM Primer VII AI Security: Defending LLM Systems Against Prompt Injection, Jailbreaks, and Adversarial Threats: 9798185644065: SHIMODA, SHO: Books

This chapter explains that AI security fundamentally and structurally differs from traditional software security. Instead of finding and patching clear bugs in readable source code, defenders must secure probabilistic models whose behaviors are driven by billions of uninterpretable weights and training data. Consequently, the security focus shifts from ensuring code correctness to managing and restricting an unbounded range of unpredictable inputs and outputs. Amazon.com: LLM Primer VII AI Security: Defending LLM Systems Against Prompt Injection, Jailbreaks, and Adversarial Threats: 9798185644065: SHIMODA, SHO: Books

This episode covers Chapter 6, focusing on the security implications of connecting models to external data (RAG). We discuss how this introduces new trust boundaries, the dangers of malicious document injection where attackers plant traps in your knowledge base, and the necessity of validating documents before they enter the model's context. Amazon.com: LLM Primer VII AI Security: Design Safe and Robust AI System eBook : SHIMODA, SHO: Kindle Store