search

OWASP / www-project-ai-security-and-privacy-guide

OWASP Foundation Web Respository
206 stars 53 forks source link

Update index.md #13

Closed jt0dd closed 1 year ago

jt0dd commented 1 year ago

Discussion: https://www.linkedin.com/feed/update/urn:li:ugcPost:7078012101872513024?commentUrn=urn%3Ali%3Acomment%3A%28ugcPost%3A7078012101872513024%2C7078013923064492032%29&dashCommentUrn=urn%3Ali%3Afsd_comment%3A%287078013923064492032%2Curn%3Ali%3AugcPost%3A7078012101872513024%29

And an article I wrote on the subject: https://www.linkedin.com/posts/jonathanktodd_gpt-llms-artificialintelligence-activity-7075546487601971200-e3Ex

robvanderveer commented 1 year ago

Thank you for the suggestion. Mind you, the text was added to the second part of the guide, which is on privacy. There are two issues mentioned, the way I see it: separation of sessions and prompt injection. Prompt injection is covered in the guide under input manipulation. The session issue is a generic security issue: any user session should be protected from its state being altered, or user data being retrieved by another user.