AI Expert

攻击LLM：提示词注入

13 分钟高级构建者LiveOverflowAI安全与数据隐私

LiveOverflow. 视频将提示词注入描述为一种经典的注入攻击，目标是混合指令与不可信数据的系统，并给出一个具体的内容审核示例：攻击者借此陷害无辜用户。从“模型是攻击目标”转变为“应用才是攻击目标”，正是文章开篇要求建立的思维方式。

AI Expert 注释

将本视频视为概念指导。在权限、保留策略、日志记录和人工审核边界明确之前，不要使用真实公司数据。

您应该从中获得什么

将提示词注入建模为不可信数据混合问题，并围绕工具调用设计边界。

先观看或了解

具备一般的Web安全直觉会有所帮助；不要求预先了解LLM安全。

最后审核：2026年5月18日

继续观看

通过相同的视频学习路径，继续观看下一个精选配套视频。

深入学习

精选的外部课程，帮助您更深入地了解该主题。

AWS Skill Builder

AWS Security: Securing Generative AI on AWS

AWS Training and Certification

A cloud-vendor-specific complement to the Macquarie specialization: AWS's own Generative AI Security Scoping Matrix, OWASP Top 10 for LLMs, and MITRE ATLAS, walked through governance, legal, and compliance controls for five different AI deployment scopes — from consumer apps to self-trained models. Not GDPR-specific, but a genuinely practical advanced pick for teams whose AI workloads actually run on AWS and need concrete data-governance and compliance controls, not just theory.

高级~2 hours · self-paced (9 modules)
Coursera · Macquarie University

Cyber Security: Data, Privacy and AI Security

Macquarie University Cyber Security Hub faculty

The advanced, most explicitly on-target answer to our GDPR × AI gap: a three-course specialization from Macquarie University's Cyber Security Hub that goes from GDPR/CCPA fundamentals and privacy-by-design, through privacy impact assessments, to a dedicated third course on securing AI systems against adversarial attacks and model leakage. Genuinely bridges 'GDPR compliance' and 'AI security' rather than treating them as separate topics.

高级~47 hours · self-paced (3-course specialization)
EU Digital Skills & Jobs Platform · CyberSuite

Secure AI Adoption for SMEs: Cybersecurity and the EU AI Act

CyberSuite

少有的真正为法案适用对象编写的《人工智能法案》课程：它面向采用AI的中小企业，而不是开发AI的实验室。课程托管在欧盟委员会自有的技能平台上，将法律层面的角色、义务和风险分类，与大多数合规课程忽略的安全问题（提示词注入、数据泄露、供应商尽职调查）结合起来。对于部署AI的爱沙尼亚中小企业，这是切实可行的起点。

高级约15小时 · 自定进度

查看所有 AI安全与数据隐私 课程