RSAC Hearth Chat: How the open-source neighborhood hustled to establish LLM vulnerabilities – Cyber Tech

By Byron V. Acohido

SAN FRANCISCO — It took some 5 years to get to 100 million customers of the World Extensive Net and it took only one 12 months to get to 100 million Fb customers.

Associated: LLM danger mitigation methods

Then alongside got here GenAI and Giant Language Fashions (LLM) and it took simply a few weeks to get to 100 million ChatGPT customers.

LLM is a recreation changer in the identical vein because the Gutenberg Press and the Edison mild bulb. It offers any literate human the power to extract worth from information.

Corporations in all sectors are in a mad scramble to reap its advantages, whilst cyber criminals feast on a brand new tier of exposures. As RSAC 2024 will get below manner subsequent week in San Francisco, the encouraging information is that the cybersecurity trade is racing to guard enterprise networks, as effectively.

Working example, the open-source neighborhood has coalesced to supply the OWASP Prime Ten for Giant Language Mannequin Purposes. Amazingly, just a bit over a 12 months in the past this was a mere notion dreamt up by Exabeam CPO Steve Wilson.

“I spent a while on a weekend drawing up a scratch model of a Prime Ten record, partly by having a dialogue with ChatGPT about it,” Wilson informed me. “The very first thing I requested was, ‘Are you aware what an OWASP Prime Ten record is?’ And it mentioned, ‘Sure.’  And I mentioned, ‘Construct me one for LLM.’ It did, however it wasn’t superb . . . I then spent quite a lot of time feeding it information about issues and training it and cajoling it and having a dialogue.”

By the top of a day of prompting, Wilson had a listing he thought was “fairly attention-grabbing,” which he socialized in his skilled communities. That was slightly over a 12 months in the past. What occurred subsequent is unprecedented. For a full drill down, please give the accompanying podcast a pay attention.

The tempo of change is accelerating. I’ll hold watch and hold reporting.

Pulitzer Prize-winning enterprise journalist Byron V. Acohido is devoted to fostering public consciousness about how you can make the Web as personal and safe because it should be.

(LW supplies consulting providers to the distributors we cowl.

Could 2nd, 2024 | Hearth Chat | RSA Podcasts | RSAC | Prime Tales