OWASP攻击LLM的10种方式:AI漏洞揭秘

25 分钟中级构建者IBM TechnologyAI安全与数据隐私

IBM Technology. 视频从提示词注入扩展到更全面的OWASP LLM十大风险——不安全的输出处理、敏感信息泄露、过度代理等。在向任何工具授予Gmail或HubSpot权限范围之前,你正需要在脑中备好这份故障模式清单。

AI Expert 注释

请将本视频视为概念性指导。在权限、保留政策、日志记录和人工审核边界明确之前,不要使用真实公司数据。

您应该从中获得什么

使用OWASP LLM风险类别审查工具访问权限、输出处理和敏感数据暴露。

先观看或了解

先了解首选视频对注入的介绍会有所帮助;无需安全背景。

最后审核:2026年5月18日

继续观看

通过相同的视频学习路径,继续观看下一个精选配套视频。

深入学习

精选的外部课程,帮助您更深入地了解该主题。

AWS Skill Builder

AWS Security: Securing Generative AI on AWS

AWS Training and Certification

A cloud-vendor-specific complement to the Macquarie specialization: AWS's own Generative AI Security Scoping Matrix, OWASP Top 10 for LLMs, and MITRE ATLAS, walked through governance, legal, and compliance controls for five different AI deployment scopes — from consumer apps to self-trained models. Not GDPR-specific, but a genuinely practical advanced pick for teams whose AI workloads actually run on AWS and need concrete data-governance and compliance controls, not just theory.

高级~2 hours · self-paced (9 modules)
Coursera · Macquarie University

Cyber Security: Data, Privacy and AI Security

Macquarie University Cyber Security Hub faculty

The advanced, most explicitly on-target answer to our GDPR × AI gap: a three-course specialization from Macquarie University's Cyber Security Hub that goes from GDPR/CCPA fundamentals and privacy-by-design, through privacy impact assessments, to a dedicated third course on securing AI systems against adversarial attacks and model leakage. Genuinely bridges 'GDPR compliance' and 'AI security' rather than treating them as separate topics.

高级~47 hours · self-paced (3-course specialization)
EU Digital Skills & Jobs Platform · CyberSuite

Secure AI Adoption for SMEs: Cybersecurity and the EU AI Act

CyberSuite

少有的真正为法案适用对象编写的《人工智能法案》课程:它面向采用AI的中小企业,而不是开发AI的实验室。课程托管在欧盟委员会自有的技能平台上,将法律层面的角色、义务和风险分类,与大多数合规课程忽略的安全问题(提示词注入、数据泄露、供应商尽职调查)结合起来。对于部署AI的爱沙尼亚中小企业,这是切实可行的起点。

高级约15小时 · 自定进度

查看所有 AI安全与数据隐私 课程