2024 · 11 citations · 12 references
ComputingComputer ScienceEducational TechnologyComputer SecuritySecure Software DevelopmentSoftware EngineeringSoftware Security EngineeringVulnerability ManagementLarge Language ModelsSecure Web Development
Large Language Models (LLMs) have extensive ability to produce promising output. Nowadays, people are increasingly relying on them due to easy accessibility, rapid and outstanding outcomes. However, the use of these results without appropriate scrutiny poses serious security risks, particularly when they are integrated with other software, APIs, or plugins. This is because the LLM outputs are highly dependent on the prompts they receive. Therefore, it is essential to carefully clean these outputs before using them in additional software environments. This paper is designed to teach students about the potential dangers of contaminated LLM output within the context of web development through prelab, hands-on, and postlab experiences. Hands-on lab provides practical guidance on how to handle LLM vulnerabilities to make applications safe with some real-world examples in Python. This approach aims to provide students with a deeper understanding of the precautions necessary to ensure software against the vulnerabilities introduced by LLM output.
12
Threat Modeling for CSRF Attacks
Xiaoli Lin, Pavol Zavarsky, Ron Ruhl et al. · 2009 · 54 citations
Large Language Models and Simple, Stupid Bugs
Kevin Jesse, Toufique Ahmed, Prémkumar Dévanbu et al. · 2023 · 51 citations
Preventing server-side request forgery attacks
Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz et al. · 2021 · 32 citations