Path 18: AI & AI Security — KashSec Academy
How LLMs work, prompt injection, OWASP LLM Top 10, AI red teaming. 23 free lessons, advanced level, starting with "How LLMs actually work"
Level: Advanced · 23 lessons · Free, no account needed.
Lessons in this path
- How LLMs actually work — A friendly primer without the mystique.
- Transformer Architecture, Deep Dive — Attention, context windows, and why prompt injection runs so deep.
- Why AI security is new — What makes AI attacks unlike any before.
- AI Threat Modeling — Systematically mapping an AI system's real attack surface.
- Prompt injection — The SQL injection of AI — direct and indirect.
- Indirect Prompt Injection, Deep Dive — Full attack chains and the dual-LLM defensive pattern.
- Jailbreaks & bypasses — Bypassing policy, not just instructions.
- Jailbreak Defenses & Guardrails — Classifiers, self-critique, and layered protection.
- OWASP LLM Top 10 — The shared checklist for AI application security.
- RAG Security Risks — Access control, poisoning, and the retrieval-trust gap.
- Poisoning & adversarial ML — Backdoors, extraction, adversarial examples.
- Multimodal Attack Vectors — Image, audio, and file-upload injection surfaces.
- AI red teaming — Methodology, harms taxonomy, ethics.
- AI Safety Evaluation & Benchmarking — Attack success rates, benchmarks, and rigorous measurement.
- Your AI-security career — The 12-month plan for a new frontier.
- Defensive Prompt Engineering — The cheapest real mitigation available to any builder.
- Agentic AI Risks — As AI agents become more powerful, new risks emerge.
- LLM Attack Taxonomy — A clear map of the different ways attackers try to break AI systems.
- LLM Governance & Compliance — Managing AI systems responsibly at scale.
- LLM Red Teaming Playbooks — Structured approaches to systematically test LLM applications.
- LLM Supply Chain Attacks — Attacks that target the components and data used to build and run LLMs.
- Practical AI Red Teaming Labs — Hands-on challenges you can do safely with free or low-cost LLMs.
- Securing LLM Applications — How to build and deploy LLMs more securely.