GenAI Application Level Security

Ken Huang (), Grace Huang, Adam Dawson () and Daniel Wu ()
Additional contact information
Ken Huang: DistributedApps.ai
Grace Huang: PIMCO
Adam Dawson: Cohere
Daniel Wu: JPMorgan Chase & Co.

Chapter Chapter 7 in Generative AI Security, 2024, pp 199-237 from Springer

Abstract: Abstract This chapter provides a comprehensive overview of security considerations, vulnerabilities, and controls at the application layer for GenAI systems. Analysis of the OWASP Top 10 for LLM applications gives the initial context of security concerns of GenAI Applications. Leading application design paradigms including RAG, ReAct, and agent-based systems are explored, along with their security implications. Major cloud-based AI services and associated security features are discussed. The Cloud Security Alliance’s Cloud Control Matrix is leveraged to evaluate application security controls relevant to GenAI. Examples grounded in banking connect security controls to real-world scenarios. Through multifaceted coverage of risks, design patterns, services, and control frameworks, the chapter equips readers with actionable insights on securing diverse GenAI applications by integrating security across the full application life cycle.

Keywords: GenAI security; Application security; OWASP; RAG; ReAct; Agent-based systems; Cloud services; Azure OpenAI; Google Vertex; Amazon Bedrock; Cloud Security Alliance; Cloud Control Matrix; Vulnerability management; Responsible AI; Security controls (search for similar items in EconPapers)
Date: 2024
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:fuobcp:978-3-031-54252-7_7

Ordering information: This item can be ordered from
http://www.springer.com/9783031542527

DOI: 10.1007/978-3-031-54252-7_7

Access Statistics for this chapter

More chapters in Future of Business and Finance from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().