Create accountLogin

Recent searches

No recent searches

Search options

Not available on handmade.social.
handmade.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
handmade.social is for all handmade artisans to create accounts for their Etsy and other handmade business shops.

Administered by:

Server stats:

35
active users

handmade.social: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#owasp

0 posts0 participants0 posts today
Public
OWASP Saitama Chapter

次回のOWASP Saitama MTG #23 は 12/10 1900〜より忘年会を兼ねてさいたま市で開催です！チャプターリーダーの @alterakey による今年の振り返りとともに、jetbeeさんからはOWASP Juice Shopの構造についてお話をいただけるそうです！参加登録はこちらからどうぞ！ buff.ly/3CTlZVx #OWASP #OWASP_Saitama

connpassOWASP Saitama MTG #23 (2024/12/10 19:00〜)## ハイブリッド開催を行ないます これまで試験的にオフラインのみの開催としてきましたが、参加者の利便性を鑑み今回から当面の間ハイブリッド開催とします。 ※1 終了後、現地組のみ完全オフレコのSkytalksおよび懇親会へと移行します。 ※2 オフラインで参加された方にはチャプターステッカーをお配りしています。 今回はさいたま開催回です; 現地会場としてRaiBoC Hall (市民会館おおみや) の集会室2を使用します。 (各線大宮駅下車、東口徒歩5分ほどです) ※会議室内での水分補給は可能なようですがゴミは各自でお持ち帰りください。 ## 忘年会を兼ねての開催になりま...
Public
Johan Sydseter

Did you know that ISO27001 requires you to do threat modeling? A 8.27 Requires you to "regularly update threat models to reflect changes in the system and external threat landscape." see: www.isms.online/iso-27001/ch... Why not try out threat modeling at copi.owasp.org #appsec #cybersec #owasp

Copi · Play Cornucopia O...

ISMS.onlineISO 27001:2022 Annex A 8.27 Checklist GuideISO 27001 A.8.27 Secure System Architecture and Engineering Principles Checklist Implementing the control A.8.27 Secure System Architecture and Engineering Principles within the ISO 27001:2022 framework is critical for organisations aiming to ensure that their information systems are secure, resilient, and compliant. This control emphasises the need for security to be an integral part of the system design and engineering process from the very beginning. For a Chief Information Security Officer (CISO), overseeing this implementation presents several challenges, from balancing security with usability to ensuring continuous compliance with evolving regulations. Scope of Annex A.8.27 A.8.27 Secure System Architecture and Engineering Principles
Public
Sasha the Dancing Flamingo

🦩 Field Notes from Sasha the Security Flamingo's HomeLab

After shaking off the flap-lag from #BSidesMelbourne (thanks for the amazing hospitality, mates!), I've been diving deep into LLM security testing with Ollama in my lab. As someone who's spent years wading through network security (with a 4-digit CCIE to prove it!), I find the parallel between traditional security controls and LLM security fascinating.

Current Project: Implementing and testing OWASP's security guidelines for LLMs in a local environment.

Key Observations from the Pink Side of Security:
🔒 Local LLMs need just as much security attention as cloud-based ones
🔍 System prompts are your first line of defense - think of them as your ACLs for language models
🛠️ Prompt injection testing requires the same methodical approach as traditional pentesting
📊 Output validation is crucial - even a flamingo knows not to trust unvalidated responses!

Quick Tip for Those Starting Out:
When setting up Ollama for security testing, start with a baseline model and document ALL changes to your system prompt. You'd be surprised how many security issues can be traced back to prompt mutations - and I've seen enough BGP mutations in my networking days to know the importance of tracking changes!

Next week, I'll be sharing my flamingo-friendly framework for LLM security testing. Because if a flamingo with one-leg stance can handle complex routing protocols, anyone can learn to secure their LLMs!

#AISecurityTesting #LLMSecurity #OWASP #SecurityResearch #Ollama #HomeLab #InformationSecurity #BSidesMelbourne

P.S. Special shoutout to the Heathrow security team who recently swabbed me for explosives. Yes, even security flamingos get extra screening! 😅

SearchLive feeds
About