Threat Modeling in the Age of AI - OWASP Global AppSec 2024

This session equips participants with the methodology and knowledge to proactively manage risks and improve the security posture of their AI systems. Threat modeling is a systematic approach to identifying potential threats and vulnerabilities in a system. This session delves into threat modeling for AI systems, and how it differs from traditional applications. Participants learn what threat modeling is & isn’t, including an overview of terms & methodologies, and then dive into how threat modeling for AI actually works. The presenter is part of the OWASP AI Exchange team of experts who developed the OWASP AI Exchange threat framework, and has extensive experience with threat modeling of mission-critical AI. With that knowledge and experience participants are guided in applying the threat framework to various types of AI architectures, to cover AI attacks such as data poisoning and indirect prompt injection.