Writing tagged: llm

Threat modeling a RAG chatbot for a bank

A walk through the OWASP LLM Top 10 threat model for a retrieval-only, unauthenticated bank chatbot. Scope the system right and only four threats actually bite.

security·threat-modeling·ai·llm·14 min

Threat modeling an authenticated RAG chatbot for a bank

Part 2. Add a login gate and read-only session-scoped tools to the Part 1 bank chatbot, re-run the OWASP LLM Top 10, and the triage nearly inverts.

security·threat-modeling·ai·llm·18 min