Securing AI applications by building our own LLM Vulnerability Scanner
08-24, 15:05–15:45 (Asia/Kuala_Lumpur), JC 3

Most data science and tech teams are not aware of the potential security vulnerabilities when building AI-powered applications utilizing self-hosted Large Language Models (LLMs). One of the more practical techniques to secure these AI-powered applications involves building a vulnerability scanner that checks for common vulnerabilities such as prompt injection. In this session, the speakers will use Python to build a custom scanner to help teams identify and mitigate security issues specific to their self-hosted LLMs right away. They will also take a look at various strategies on how to mitigate the vulnerabilities found by our scanner.


Over the next few years, we'll see more organizations building various AI-powered tools and systems. While most AI-powered tools can be built using 3rd-party services and APIs, we'll see more companies using their own LLMs and hosting it in their own private network environments. For one thing, having a self-hosted LLM would guarantee greater control over data privacy and security. In addition to this, companies would gain the much needed flexibility when customizing their LLMs to specific business needs and constraints.

At this point, most professionals are not aware of the security threats and potential security vulnerabilities when building AI-powered applications utilizing self-hosted Large Language Models (LLMs). Similarly, security teams and professionals have not yet adjusted to the new wave of security attacks due to the pace of innovation in the AI space.

One of the more practical techniques to secure these AI-powered applications involves building and using a vulnerability scanner that checks for common vulnerabilities such as prompt injection. In this session, we will use Python to build a custom scanner to help teams identify and mitigate security issues specific to their self-hosted LLMs right away. Finally, we'll also take a look at various strategies on how to mitigate the vulnerabilities found by our scanner.

Sophie Soliven is the Director of Operations for Edamama. She has over 9 years of experience in e-commerce, fintech, and retail. Over the years, she has also been sharing her knowledge and experience in both the local and the international scene.

Joshua Arvin Lat is the Chief Technology Officer (CTO) of NuWorks Interactive Labs, Inc. He is also an AWS Machine Learning Hero and he has authored 3 books on machine learning and security.