DCSG1 - You can't engineer your way out of a bad AI stack - Paul
DEFCONConference · 15:28 · Watch on YouTube
You can't secure an LLM app with prompt engineering alone — you must enforce authorization, isolation, and logging in the system architecture around the model, as shown by live IDOR, injection, and chaining attacks on...