Web LLM Attacks: Notes from the PortSwigger Learning Path
Introduction I recently completed the Web LLM attacks learning path from PortSwigger Web Security Academy. I already had a foundation in LLM security from the DeepLearning.AI courses I took earlier this year: red teaming, guardrails, quality and safety evaluation, and LLMOps. My notes from those courses are in this same section. They mostly look at LLM applications from the builder’s side, meaning how to evaluate them, monitor them and put controls around them. ...