Redaction in LLM Security: Sometimes the AI Doesn’t Need to Know
One of the most powerful security controls in an AI system is also one of the least glamorous:
Read article: Redaction in LLM Security: Sometimes the AI Doesn’t Need to KnowApplication Security
22 articles tagged Application Security.
Content Security Policy: Putting the Browser on a Security Diet
Web applications have become remarkably powerful.
Read article: Content Security Policy: Putting the Browser on a Security Diet
Input Validation: Because Users Are Creative, and Attackers Are More Creative
There is a special kind of optimism that exists in software development.
Read article: Input Validation: Because Users Are Creative, and Attackers Are More Creative
Secure Code Reviews: Finding Security Issues Before Attackers Do
For most corporate IT workshops, we are often trying to abstract as many security details away from application code as possible. I understand things may work differently at Big Tech / shops-with-many-competent developer resources. I initially started jotting down notes for this blog post while I…
Read article: Secure Code Reviews: Finding Security Issues Before Attackers Do
Understanding Unauthenticated Traffic: How Applications and APIs Represent The Unauthenticated User
Authentication is one of the most fundamental concepts in application security. Most developers spend considerable time designing how authenticated users are represented, authorized, and managed. Surprisingly, much less attention is given to the opposite state of users who have not authenticated at…
Read article: Understanding Unauthenticated Traffic: How Applications and APIs Represent The Unauthenticated User
AI / LLM Software Security: Part 5
This is the fifth (and final) post in my “AI / LLM Software Security Series”.
Read article: AI / LLM Software Security: Part 5
AI / LLM Software Security: Part 4
This is the forth post in my “AI / LLM Software Security Series”.
Read article: AI / LLM Software Security: Part 4
AI / LLM Software Security: Part 3
This is the third post in my “AI / LLM Software Security Series”.
Read article: AI / LLM Software Security: Part 3
AI / LLM Software Security Series
This series explores the “OWASP Top 10 for LLM Applications 2025” issues.
Read article: AI / LLM Software Security Series
AI / LLM Software Security: Part 2
This is the second post in my “AI / LLM Software Security Series”.
Read article: AI / LLM Software Security: Part 2