Module 2 of 6Lesson 1 of 2~20 min
Map the threats with OWASP and keep a risk register
Securing an AI feature starts with knowing where it can be attacked. This lesson teaches you to map its attack surface, check it against OWASP's reference list for LLM applications, then open a risk register ranked by likelihood and impact that the whole team can keep up to date.
Lesson objective
By the end of this lesson, you will be able to map the attack surface of an AI feature, run it through the ten categories of the OWASP Top 10 for LLM Applications 2025, and derive a risk register prioritized by likelihood and impact.
Topics covered
- OWASP Top 10 for LLM
- risk register
- attack surface
- threat modeling
Where it fits
Map the threats
Where can an AI product be attacked, and how do you prioritize what you protect?
Lessons in this module
- Map the threats with OWASP and keep a risk register (this lesson)
- Direct and indirect prompt injection, and system prompt leakage
What you will learn in this module
This lesson is part of the course Secure an AI product: prompt injection, guardrails and the AI Act
- Map the attack surface of an AI product and its risks with the OWASP Top 10 for LLM Applications 2025, in a prioritized risk register.
- Analyze a product's direct and indirect prompt injection paths, system prompt leakage and data exfiltration (lethal trifecta).
Related courses
- AI & ProductAdvancedRegular practice: you already use the tools or work on this topic.
Build an AI assistant for your product
3 hr
- AI & ProductAdvancedRegular practice: you already use the tools or work on this topic.
Design a RAG architecture that fits your product
3 hr 30 min
- AI & ProductAdvancedRegular practice: you already use the tools or work on this topic.
Evaluate an AI feature: test sets, metrics and LLM judges
3 hr