{"tldrawFileFormatVersion":1,"schema":{"schemaVersion":2,"sequences":{"com.tldraw.store":5,"com.tldraw.asset":1,"com.tldraw.camera":1,"com.tldraw.document":2,"com.tldraw.instance":26,"com.tldraw.instance_page_state":5,"com.tldraw.page":1,"com.tldraw.instance_presence":6,"com.tldraw.pointer":1,"com.tldraw.shape":4,"com.tldraw.user":1,"com.tldraw.asset.image":6,"com.tldraw.asset.video":5,"com.tldraw.asset.bookmark":2,"com.tldraw.shape.arrow":8,"com.tldraw.shape.bookmark":2,"com.tldraw.shape.draw":5,"com.tldraw.shape.embed":4,"com.tldraw.shape.frame":1,"com.tldraw.shape.geo":12,"com.tldraw.shape.group":0,"com.tldraw.shape.highlight":4,"com.tldraw.shape.image":5,"com.tldraw.shape.line":5,"com.tldraw.shape.note":13,"com.tldraw.shape.text":4,"com.tldraw.shape.video":4,"com.tldraw.binding.arrow":1,"com.tldraw.comment-thread":3,"com.tldraw.comment":1,"com.tldraw.comment-reaction":1}},"records":[{"meta":{},"id":"page:page","name":"AI Sec","index":"a1","typeName":"page"},{"x":71,"y":53,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:kkVY651dBoS5I4wcB6fBn","type":"text","props":{"color":"black","size":"m","w":590,"font":"draw","textAlign":"start","autoSize":false,"scale":1,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Five-Layer AI Stack (study model)"}]}]}},"parentId":"page:page","index":"a1RDM","typeName":"shape"},{"x":58,"y":124,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:eFHQT4NKMpRVklP1kUyN-","type":"geo","props":{"w":199,"h":176,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L1: Infrastructure"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"GPUs"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Storage"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Network"}]}]}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"}}]}},"parentId":"page:page","index":"a2Am6","typeName":"shape"},{"x":63,"y":319,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:w2M3BkA9jhu_U7gHjwAzf","type":"geo","props":{"w":294,"h":158,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"light-blue","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L2: Model"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Weights"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Neural Network"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Training Data"}]}]}]}]}},"parentId":"page:page","index":"a3VeE","typeName":"shape"},{"x":65,"y":504,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:UCxkHH1FWfz_ilajZWyDH","type":"geo","props":{"w":200,"h":200,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"green","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L3: API/Serving"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Auth"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Rate Limiting"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"The “money” layer"}]}]}]}]}},"parentId":"page:page","index":"a4a3A","typeName":"shape"},{"x":61,"y":731,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:CwbEgZQO4FALF3TpbKR5V","type":"geo","props":{"w":474,"h":143,"geo":"rectangle","dash":"draw","growY":9,"url":"","scale":1,"flipX":false,"flipY":false,"color":"yellow","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"L4: Orchestration"}]},{"type":"paragraph","content":[{"type":"text","text":"Agents"}]},{"type":"paragraph","content":[{"type":"text","text":"RAG: retrieval-augmented generation"}]},{"type":"paragraph","content":[{"type":"text","text":"Tool calling"}]}]}},"parentId":"page:page","index":"a5zB1","typeName":"shape"},{"x":61,"y":915,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:vtaJIgYuyXtQGNUv9FqMu","type":"geo","props":{"w":200,"h":200,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L5: Application"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"UI"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Chatbots"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Copilots"}]}]}]}]}},"parentId":"page:page","index":"a6W2j","typeName":"shape"},{"x":737,"y":7.000000148042801,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:zE-Tw1_ZtnfsoO1_4KSsX","type":"geo","props":{"w":225,"h":228.99999967064252,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L1 Risks"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Compute Hijacking"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Data Theft at Rest"}]}]}]}]}},"parentId":"page:page","index":"a7EVE","typeName":"shape"},{"x":705,"y":493,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:ff7RABYegzPRlMjWRIBY2","type":"geo","props":{"w":299,"h":244,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"light-green","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L3: Risks"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"API Key Theft"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Token Exhaustion Attacks"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Unencrypted Prompt Logs "}]}]}]}]}},"parentId":"page:page","index":"a92rj","typeName":"shape"},{"x":660,"y":739,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:pS-XffAY50fV_1EnUxPbO","type":"geo","props":{"w":377,"h":267,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"yellow","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"L4: Risks"}]},{"type":"paragraph","content":[{"type":"text","text":"High-priority attack surface"}]},{"type":"paragraph","content":[{"type":"text","text":"Tool misuse"}]},{"type":"paragraph","content":[{"type":"text","text":"Privilege escalation"}]},{"type":"paragraph","content":[{"type":"text","text":"Indirect prompt injection"}]}]}},"parentId":"page:page","index":"aAtoj","typeName":"shape"},{"x":694,"y":1016,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:qUlfTjpYpTlJ5L7gFL449","type":"geo","props":{"w":305.00000000000006,"h":211.00000000000003,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L5: Risks"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Prompt Injection (Direct)"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Jailbreaking"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Insecure Output Handling"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Data Exposure"}]}]}]}]}},"parentId":"page:page","index":"aBQrn","typeName":"shape"},{"x":258,"y":217,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:aFZJF7oo02IhB3aoNdOGg","type":"line","props":{"dash":"draw","size":"s","color":"red","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2fs2":{"id":"a2fs2","index":"a2fs2","x":479,"y":-94}},"scale":1},"parentId":"page:page","index":"aCL7Q","typeName":"shape"},{"x":357,"y":413,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:nRaSmhm_SRfZGpE-zRJJt","type":"line","props":{"dash":"draw","size":"s","color":"light-blue","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2h7E":{"id":"a2h7E","index":"a2h7E","x":380,"y":-32}},"scale":1},"parentId":"page:page","index":"aDeAX","typeName":"shape"},{"x":265,"y":608,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:I9iTGDjcsc0NaquS1EEdz","type":"line","props":{"dash":"draw","size":"s","color":"light-green","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2ZAI":{"id":"a2ZAI","index":"a2ZAI","x":0.1,"y":0.1}},"scale":1},"parentId":"page:page","index":"aE5PX","typeName":"shape"},{"x":262,"y":609,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:d1ZdRJCl_lAUSy4vJb3GN","type":"line","props":{"dash":"draw","size":"s","color":"light-green","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2v0b":{"id":"a2v0b","index":"a2v0b","x":442,"y":-5}},"scale":1},"parentId":"page:page","index":"aFuGr","typeName":"shape"},{"x":533,"y":819,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:07Hy5eRFtxE_tarEWnaqB","type":"line","props":{"dash":"draw","size":"s","color":"yellow","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a291X":{"id":"a291X","index":"a291X","x":129,"y":35}},"scale":1},"parentId":"page:page","index":"aGblM","typeName":"shape"},{"x":257,"y":1014,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:LL54cZ87pQtpjBRSUiqnf","type":"line","props":{"dash":"draw","size":"s","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2MtU":{"id":"a2MtU","index":"a2MtU","x":441,"y":83}},"scale":1},"parentId":"page:page","index":"aHkun","typeName":"shape"},{"x":1588,"y":321,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:bwZjcNP3JxarmpRwHeS8O","type":"text","props":{"color":"black","size":"m","w":549,"font":"draw","textAlign":"start","autoSize":false,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"We Own Risk With ANY Type of AI Usage!!"}]}]}},"parentId":"page:page","index":"aIuiX","typeName":"shape"},{"x":1589,"y":396,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Y-mUiuFbwX63ykfr4AgXs","type":"geo","props":{"w":554,"h":62,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"AI APIs: secure your app, tools and credentials"}]}]}},"parentId":"page:page","index":"aJwKz","typeName":"shape"},{"x":1591,"y":497,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:PxiecGgFjEKT7AsAQnLVW","type":"geo","props":{"w":550,"h":62,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Custom AI: responsibility spans the full stack"}]}]}},"parentId":"page:page","index":"aKMsf","typeName":"shape"},{"x":1034,"y":868,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:sXkoGveQkfhJlgI9UV8aA","type":"line","props":{"dash":"draw","size":"m","color":"yellow","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2rJQ":{"id":"a2rJQ","index":"a2rJQ","x":554,"y":-435}},"scale":1},"parentId":"page:page","index":"aMop6","typeName":"shape"},{"x":994,"y":1103,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:wEFs2Xb9eRlpHCJp0OhPM","type":"line","props":{"dash":"draw","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a26Df":{"id":"a26Df","index":"a26Df","x":595,"y":-669}},"scale":1},"parentId":"page:page","index":"aNFQf","typeName":"shape"},{"x":1002,"y":614,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:emiJbI2YqfyCG1lm7Ji_2","type":"line","props":{"dash":"draw","size":"m","color":"light-green","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a28EI":{"id":"a28EI","index":"a28EI","x":588,"y":-84}},"scale":1},"parentId":"page:page","index":"aONsf","typeName":"shape"},{"x":1036,"y":890,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:GuvlAT9h_9i75OgalhODo","type":"line","props":{"dash":"draw","size":"m","color":"yellow","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2fSb":{"id":"a2fSb","index":"a2fSb","x":555,"y":-360}},"scale":1},"parentId":"page:page","index":"aPr7r","typeName":"shape"},{"x":997,"y":1130,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:3abNgUU_HzvitSElpwSa4","type":"line","props":{"dash":"draw","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2QXU":{"id":"a2QXU","index":"a2QXU","x":597,"y":-601}},"scale":1},"parentId":"page:page","index":"aQlbQ","typeName":"shape"},{"x":1002,"y":628,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:0kp31b7rbnWFub6HfxQxJ","type":"line","props":{"dash":"draw","size":"m","color":"light-green","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2JPf":{"id":"a2JPf","index":"a2JPf","x":589,"y":2}},"scale":1},"parentId":"page:page","index":"aRper","typeName":"shape"},{"x":1027,"y":910,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:iixqDrXuzabq4KXMTN-3F","type":"line","props":{"dash":"draw","size":"m","color":"yellow","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2gHI":{"id":"a2gHI","index":"a2gHI","x":564,"y":-283}},"scale":1},"parentId":"page:page","index":"aSzV7","typeName":"shape"},{"x":2194,"y":511.13859049999996,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:FQ5tas-EocwsHYbUXsaiB","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"m","fill":"semi","color":"black","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":342,"y":190},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"aVDyM","typeName":"shape"},{"x":2609.3929158279498,"y":544.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:fUK1HUBDm6MDq62i9ovFH","type":"geo","props":{"w":212,"h":139,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Prompt Injection"}]}]}},"parentId":"page:page","index":"aXSdn","typeName":"shape"},{"x":3315.3929158279498,"y":531.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:zKy_OoOJgBfUm4meiU0Gt","type":"geo","props":{"w":387,"h":243,"geo":"rectangle","dash":"draw","growY":5,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Methods:"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Instruction Override"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Goal: Get the Agent to ignore safety instructions"}]}]}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Role Reassignment"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Goal: Manipulate the Agent’s desire to be helpful"}]}]}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"System Prompt Extraction"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Goal: Reveal the System Prompt"}]}]}]}]}]}]}},"parentId":"page:page","index":"acNcA","typeName":"shape"},{"x":2931.3929158279498,"y":540.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:5iZjwcGEf0BX8O5Iyj-BO","type":"geo","props":{"w":237,"h":62,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Direct (L5)"}]}]}},"parentId":"page:page","index":"aY9zD","typeName":"shape"},{"x":2944.3929158279498,"y":865.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:yXViA6UeeWBouTKZEY4kI","type":"geo","props":{"w":251,"h":62,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Indirect (L4 & L5)"}]}]}},"parentId":"page:page","index":"aZVxM","typeName":"shape"},{"x":3314.3929158279498,"y":821.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Tm5daqiXHoBZvx_1FpLL0","type":"geo","props":{"w":396,"h":237,"geo":"rectangle","dash":"draw","growY":299,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Methods: "}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Attacker talks to something an Agent will read later rather than the Agent itself."}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"PDFs, Web Pages, Emails, MCP, RAG, etc."}]}]}]}]}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Attacks happen in 5 steps:"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Attacker plants malicious instructions (like hidden white-on-white text on a webpage)"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Poisoned artifact enters legit file retrieval/upload"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"User asks the LLM to retrieve the artifact"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"The model processes the artifact in context and may mistake attacker instructions for authorized directions."}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"The user unknowingly receives and trusts manipulated output"}]}]}]}]}},"parentId":"page:page","index":"adGTX","typeName":"shape"},{"x":3188.667294618335,"y":890.7107340524542,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:h8j6xBCOxknZJxgVI-3Td","type":"line","props":{"dash":"draw","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2Osf":{"id":"a2Osf","index":"a2Osf","x":124,"y":67}},"scale":1},"parentId":"page:page","index":"afBbb","typeName":"shape"},{"x":3166.667294618335,"y":567.7107340524542,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:RFXqPoAJ5_6EwAQspVYT4","type":"line","props":{"dash":"draw","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a25bE":{"id":"a25bE","index":"a25bE","x":148,"y":76}},"scale":1},"parentId":"page:page","index":"ae15f","typeName":"shape"},{"x":2818.3929158279498,"y":616.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:1zyWKzqHjEznYGpYbg1fV","type":"line","props":{"dash":"dashed","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2RN6":{"id":"a2RN6","index":"a2RN6","x":128,"y":285}},"scale":1},"parentId":"page:page","index":"abojU","typeName":"shape"},{"x":2818.3929158279498,"y":618.3982806366432,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:fYMSr7I8wED53UXb_iEui","type":"line","props":{"dash":"dashed","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2O0z":{"id":"a2O0z","index":"a2O0z","x":115,"y":-49}},"scale":1},"parentId":"page:page","index":"aahD2","typeName":"shape"},{"x":2554,"y":507,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:kfHJEXLg7XbCP_nz9FAmf","type":"geo","props":{"w":1328,"h":2043.7623899375003,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"black","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph"}]}},"parentId":"page:page","index":"aUPTE","typeName":"shape"},{"x":2601.765984485198,"y":1502.7799821694343,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:XSBVHS6oO2sqMmEdLB14t","type":"geo","props":{"w":277,"h":124,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Jailbreaking (L2)"}]}]}},"parentId":"page:page","index":"ag6wI","typeName":"shape"},{"x":735,"y":245,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:f1uBMxqJkIbQWQihGD3Zz","type":"geo","props":{"w":286,"h":254.53396678585085,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"light-blue","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"L2: Risks"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Training Data Poisoning"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Model Theft"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Inherited Bias"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Jailbreaking"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Prompt Injection (Indirect)"}]}]}]}]}},"parentId":"page:page","index":"a81Qz","typeName":"shape"},{"x":3161.765984485198,"y":1462.7799821694343,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:HIoozwr0K0Pnw1ZvOMfq5","type":"geo","props":{"w":615,"h":601,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Methods:"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"DAN: role-play prompts that attempt to bypass safety behavior"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Indirect Prompt Injection"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Adversarial suffixes: optimized strings that can increase jailbreak success"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Crescendo: gradual multi-turn escalation toward a harmful request"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Many-Shot: Abuses context windows for malicious instruction"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Tool-calling jailbreaks: attempts to turn model bypasses into actions"}]}]}]}]}},"parentId":"page:page","index":"ahoQr","typeName":"shape"},{"x":2571.236890877067,"y":2226.399323797442,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:12LuAXM2szykb3ZQfRBeS","type":"geo","props":{"w":307.90058538953554,"h":80.70994146104658,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"green","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Typosquatting (supply chain)"}]}]}},"parentId":"page:page","index":"aiQLQ","typeName":"shape"},{"x":3146.2873675925425,"y":2162.392131266943,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:zTSvAwMcLxuVxlUXtQB21","type":"geo","props":{"w":638,"h":335.35388018758294,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"green","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Methods:"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"When a malicious package name resembles a legit one"}]},{"type":"bulletList","attrs":{"dir":"auto"},"content":[{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Official repository: github/github-mcp-server"}]}]},{"type":"listItem","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Hypothetical lookalike: github/gittub-mcp-server"}]}]}]}]}]}]}},"parentId":"page:page","index":"ajAzD","typeName":"shape"},{"x":2876.5772256544437,"y":1568.7444114455193,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:aEQrWDaW0c4IwUUfcp0FA","type":"line","props":{"dash":"draw","size":"m","color":"blue","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2lTA":{"id":"a2lTA","index":"a2lTA","x":283.9805198184217,"y":109.88190967848482}},"scale":1},"parentId":"page:page","index":"akyyb","typeName":"shape"},{"x":2876.5772256544437,"y":2253.7225497010086,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:ifqA6KFgdVryPuVRfXiNJ","type":"line","props":{"dash":"draw","size":"m","color":"green","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2IwI":{"id":"a2IwI","index":"a2IwI","x":269.71014193809924,"y":69.92485161358127}},"scale":1},"parentId":"page:page","index":"alQJ2","typeName":"shape"},{"x":993,"y":1146,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:DUA62hTSo-Su4n3WeFuam","type":"line","props":{"dash":"draw","size":"m","color":"violet","spline":"line","points":{"a1":{"id":"a1","index":"a1","x":0,"y":0},"a2F76":{"id":"a2F76","index":"a2F76","x":595,"y":-516}},"scale":1},"parentId":"page:page","index":"aTgV6","typeName":"shape"},{"x":4179.485313843649,"y":489.29365231541715,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:ue6keOltPOUAl4E91_lEB","type":"geo","props":{"w":1375.6644276631077,"h":3716.3689749295922,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"green","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph"}]}},"parentId":"page:page","index":"amFYE","typeName":"shape"},{"x":4193.755691723972,"y":1504.1423479828281,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:cuzoCcur5_uI6pPIOt1h5","type":"geo","props":{"w":453.7980165942613,"h":536,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"orange","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"For Claude: "}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Create or edit ~/.claude/settings.json"}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"{"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"  \"permissions\": {"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"    \"defaultMode\": \"default\","}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"    \"deny\": ["}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"      \"Read(**/.env)\","}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"      \"Read(**/secrets/**)\","}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"      \"Read(~/.ssh/**)\","}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"      \"Edit(**/.github/workflows/**)\","}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"      \"mcp__untrusted__*\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"    ],"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"    \"ask\": ["}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"      \"mcp__github__*\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"    ]"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"  }"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"}"}]},{"type":"paragraph","attrs":{"dir":"auto"}}]}},"parentId":"page:page","index":"apzMk","typeName":"shape"},{"x":4657.5537083182335,"y":1467.0393654939894,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:2aUdbQLrIcnEGm1fEjl4x","type":"geo","props":{"w":462,"h":608,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"yellow","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"For Gemini: "}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Create or edit ~/.gemini/policies/least-privilege.toml"}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"# Require approval for all MCP calls"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"[[rule]]"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"mcpName = \"*\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"decision = \"ask_user\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"priority = 100"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"# Allow this specific GitHub read operation"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"[[rule]]"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"mcpName = \"github\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"toolName = \"get_file_contents\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"decision = \"allow\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"priority = 200"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"# Require approval for shell commands"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"[[rule]]"}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"toolName = \"run_shell_command\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"decision = \"ask_user\""}]},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"priority = 200"}]},{"type":"paragraph","attrs":{"dir":"auto"}}]}},"parentId":"page:page","index":"as05v","typeName":"shape"},{"x":5129.5537083182335,"y":1467.0393654939894,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:gFKbnilFKzrPPpOu10Y0u","type":"geo","props":{"w":371,"h":608,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"s","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"For ChatGPT: "}]},{"type":"paragraph","attrs":{"dir":"auto"}},{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"For a managed Enterprise/Edu workspace, administrators can additionally restrict which groups access an MCP app and enable or disable specific MCP actions. Where available, set new actions to disabled by default."}]}]}},"parentId":"page:page","index":"atMDX","typeName":"shape"},{"x":4181.052204788613,"y":2188.441441584418,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:FWn084kM8lN5vwziXVId-","type":"geo","props":{"w":1369.9562765109781,"h":77.06004055374251,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph"}]}},"parentId":"page:page","index":"atyvQV","typeName":"shape"},{"x":4207.762672028257,"y":2213.215441263686,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:D_jCXSdykyqi1Em2ZzDXB","type":"text","props":{"color":"blue","size":"m","w":1332.085102316268,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"OWASP Agentic Top 10 (2026)"}]}]}},"parentId":"page:page","index":"auNIb","typeName":"shape"},{"x":4191.248314745537,"y":3344.2781756395475,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:4Ayz9n4s6nD4EyO2Csg8Y","type":"geo","props":{"w":1359.9670119947525,"h":82.76819170587169,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"OWASP Web Application Top 10 (2025)"}]}]}},"parentId":"page:page","index":"awEyX","typeName":"shape"},{"x":4543.410867767493,"y":402.93696917059424,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:sPlGE7p_W3YH_qzmLwhxq","type":"text","props":{"color":"green","size":"xl","w":673.5,"font":"draw","textAlign":"middle","autoSize":true,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"What are we responsible for?"}]}]}},"parentId":"page:page","index":"anXJf","typeName":"shape"},{"x":-164.19368607295922,"y":1485.4140983825405,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:NZx5COl_GEo7B_gsLB61c","type":"geo","props":{"w":411.0808442891309,"h":435.0061844329425,"geo":"hexagon","dash":"draw","growY":0,"url":"","scale":1,"flipX":true,"flipY":true,"color":"red","labelColor":"black","fill":"semi","size":"l","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"GenAI"}]}]}},"parentId":"page:page","index":"azmVE","typeName":"shape"},{"x":-264.2451084925358,"y":1241.8106351000924,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:ZmPWRm-kc5kA0FwH5FhBq","type":"geo","props":{"w":2605.6870447533274,"h":2984.1424252099873,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph"}]}},"parentId":"page:page","index":"axt0OV","typeName":"shape"},{"x":784.1712184104329,"y":1546.3663866227294,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Qtv_URn_xTOVu6uA0V6wz","type":"geo","props":{"w":267.42595858710604,"h":332.6768862520473,"geo":"rhombus","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"orange","labelColor":"black","fill":"semi","size":"l","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"ML/LLM"}]}]}},"parentId":"page:page","index":"b00uZb","typeName":"shape"},{"meta":{},"id":"binding:olLJ6ACPB60KgB4k9ZpLz","type":"arrow","fromId":"shape:d31O9jtdTYb7hOCTMr9uM","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.2070116861435725,"y":0.15306122448979598},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:6KV5SVPx_WAgDrRqPJIoR","type":"arrow","fromId":"shape:d31O9jtdTYb7hOCTMr9uM","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.4098497495826376,"y":0.15306122448979598},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":275.16256020431297,"y":1698.5671287546825,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:d31O9jtdTYb7hOCTMr9uM","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axyRLd","typeName":"shape"},{"x":277.3375911264777,"y":1597.9410464789175,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Lup4RItFeK14NafSY2Lg0","type":"text","props":{"color":"black","size":"m","w":497.3562462772722,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"GenAI uses ML models/LLMs to generate content"}]}]}},"parentId":"page:page","index":"b01Yh6","typeName":"shape"},{"x":958.1222697640331,"y":1367.9624285856457,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:sbpHxjRkHtIG4a3vK4U7D","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"m","fill":"semi","color":"blue","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"b03nIU","typeName":"shape"},{"meta":{},"id":"binding:xqRl6y8rdQJ317HKZvNUT","type":"arrow","fromId":"shape:sbpHxjRkHtIG4a3vK4U7D","toId":"shape:CEtpFtKdYrqXVxNvJi2-P","props":{"isPrecise":false,"isExact":false,"normalizedAnchor":{"x":0.5000000000000001,"y":0.49999999999999967},"snap":"center","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:U0-HpOvZxgbz2GkA2d4wh","type":"arrow","fromId":"shape:sbpHxjRkHtIG4a3vK4U7D","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.4774624373956594,"y":0.09620991253644313},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":1008.1479809738217,"y":1395.4630470289403,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:T3sYbgi5dDbYavn_8_CBT","type":"text","props":{"color":"black","size":"m","w":397.65488570202547,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"LLMs are built on Large Neural Network models called the Transformer Architecture"}]}]}},"parentId":"page:page","index":"b04aLE","typeName":"shape"},{"x":-179.41890252811214,"y":2216.224488229884,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:_8jz0fY160GohTN3QhU7B","type":"geo","props":{"w":421.9559988999545,"h":417.6059370556254,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"black","labelColor":"black","fill":"semi","size":"l","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"User sends a prompt"}]}]}},"parentId":"page:page","index":"b05L8M","typeName":"shape"},{"x":16.333880466712003,"y":2203.174302696896,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:PDH6UIU4wfkFbEUsuc_pB","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":-32.52411555220397,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axvTze","typeName":"shape"},{"meta":{},"id":"binding:wFKjzKs3yJ83X4pFatQiQ","type":"arrow","fromId":"shape:PDH6UIU4wfkFbEUsuc_pB","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.1076794657762937,"y":0.3221574344023324},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:_eWBnSP_VLwyw7_wuxMHd","type":"arrow","fromId":"shape:PDH6UIU4wfkFbEUsuc_pB","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.10851419031719522,"y":0.22740524781341118},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":799.3450124460088,"y":1249.328036039027,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:CEtpFtKdYrqXVxNvJi2-P","type":"geo","props":{"w":371.930287690166,"h":128.5172389850023,"geo":"cloud","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"The Transformer Architecture"}]}]}},"parentId":"page:page","index":"b02zrs","typeName":"shape"},{"x":27.209035077535646,"y":1998.146736157225,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:ztS22AILcyY4ECrLvUD3E","type":"text","props":{"color":"black","size":"l","w":845.6561225886136,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Prompt quality matters; so do model capability, context, tools and validation."}]},{"type":"paragraph","content":[{"type":"text","text":"Model × prompt is a mnemonic, not a measured equation."}]}]}},"parentId":"page:page","index":"b06dib","typeName":"shape"},{"x":1443.2055878263413,"y":1550.7164484670584,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Eo03dUQvXCNpaDItxMTPg","type":"geo","props":{"w":406.62793760564773,"h":332.67688625204755,"geo":"diamond","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"l","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Tokenizer"}]}]}},"parentId":"page:page","index":"b07KeA","typeName":"shape"},{"x":1042.9484757284567,"y":1698.5671287546825,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:d46tkmNDZA4cDDGXp7jkE","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":226.2032159051305,"y":6.525092766494254},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axtWIy","typeName":"shape"},{"meta":{},"id":"binding:_wBtgKqaPwV05lPEqsjRS","type":"arrow","fromId":"shape:d46tkmNDZA4cDDGXp7jkE","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.5016694490818028,"y":0.15306122448979598},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:miTbNmwDDM8wrcLR4x7AA","type":"arrow","fromId":"shape:d46tkmNDZA4cDDGXp7jkE","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.6477462437395658,"y":0.1537900874635569},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":1101.6743106269041,"y":1719.7427781201413,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:7dIihIQVvoDvV7VNbWgCy","type":"text","props":{"color":"black","size":"m","w":228.30235008451837,"font":"draw","textAlign":"middle","autoSize":false,"scale":1.3148071071554206,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"The tokenizer converts prompt text into token IDs."}]}]}},"parentId":"page:page","index":"b08LSn","typeName":"shape"},{"meta":{},"id":"binding:bF3YjuyKd2yHS05WKzUwa","type":"arrow","fromId":"shape:MaZx93kStJR5Qi-6TvPxK","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.8146911519198664,"y":0.15670553935860063},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:mLsNuewrqkQvEIxerMr9n","type":"arrow","fromId":"shape:MaZx93kStJR5Qi-6TvPxK","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.8848080133555924,"y":0.2419825072886298},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":1858.5850715402248,"y":1709.442283365506,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:MaZx93kStJR5Qi-6TvPxK","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":-102.20427600047996,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axtE1Ut","typeName":"shape"},{"x":1514.8622161218825,"y":1921.820530192801,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:YohoA8wkF4twH5JyRyGTR","type":"text","props":{"color":"black","size":"m","w":284.60222639585936,"font":"draw","textAlign":"middle","autoSize":false,"scale":1.3908258688264716,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"The tokenizer decodes generated token IDs back into readable text (detokenization)."}]}]}},"parentId":"page:page","index":"b0BCJr","typeName":"shape"},{"x":577.4918583852082,"y":2672.9809818844747,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:D6MFhjPzigzPrrda6jCjt","type":"geo","props":{"w":416,"h":417.6059370556254,"geo":"ellipse","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"black","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"User receives response from GenAI"}]}]}},"parentId":"page:page","index":"b0CPzY","typeName":"shape"},{"x":1432.2790107959404,"y":2527.2539100994386,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:HaLGMSzOqhYjMbQcgX9FV","type":"geo","props":{"w":454.5814627324253,"h":530.7075450081902,"geo":"hexagon","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"l","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"GenAI"}]}]}},"parentId":"page:page","index":"b0DEeb","typeName":"shape"},{"x":2019.5373597804137,"y":2355.426467248426,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:CJNpMDVZqWGZUYXDCU6E7","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axt6p2h","typeName":"shape"},{"meta":{},"id":"binding:HkA897tZ7GYIeIZb6T1Yp","type":"arrow","fromId":"shape:CJNpMDVZqWGZUYXDCU6E7","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.8764607679465776,"y":0.3731778425655977},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:26Ik1Fwnm7p4NEMZlLK0M","type":"arrow","fromId":"shape:CJNpMDVZqWGZUYXDCU6E7","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.7988313856427378,"y":0.4489795918367348},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":1934.7111538159897,"y":2500.578879177274,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:YAdchQG6ojz5t3HvkKtoD","type":"text","props":{"color":"black","size":"l","w":332.70383434842415,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Decoded response returns to the application."}]}]}},"parentId":"page:page","index":"b0EyCv","typeName":"shape"},{"x":1397.4785160413053,"y":2879.6089194901224,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:rNP7_ejnPPdYXk09pNxHD","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axt2UQB","typeName":"shape"},{"meta":{},"id":"binding:sPQYi6vf2fpNj2aViCvfT","type":"arrow","fromId":"shape:rNP7_ejnPPdYXk09pNxHD","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.6377295492487477,"y":0.5488338192419827},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:mkHiJS1l_0EuvTRVmh66u","type":"arrow","fromId":"shape:rNP7_ejnPPdYXk09pNxHD","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.48831385642737896,"y":0.5510204081632654},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":542.6913636305728,"y":2864.383703034969,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:LHz0emzvTyZsXf3KnzX_D","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"l","fill":"semi","color":"black","labelColor":"black","bend":0,"start":{"x":0,"y":0},"end":{"x":2,"y":0},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"axt0rr9","typeName":"shape"},{"meta":{},"id":"binding:oThJVIMyWRmDuMqCFV3Il","type":"arrow","fromId":"shape:LHz0emzvTyZsXf3KnzX_D","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.3096828046744573,"y":0.543731778425656},"snap":"none","terminal":"start"},"typeName":"binding"},{"meta":{},"id":"binding:FF1GKPbUE-4ccUFt5M336","type":"arrow","fromId":"shape:LHz0emzvTyZsXf3KnzX_D","toId":"shape:ZmPWRm-kc5kA0FwH5FhBq","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.16944908180300491,"y":0.47157434402332365},"snap":"none","terminal":"end"},"typeName":"binding"},{"x":1762.8837109649774,"y":1541.390242502635,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:RmDLgIL7g-853K8gNIBc0","type":"text","props":{"color":"black","size":"m","w":432.8286797376008,"font":"draw","textAlign":"middle","autoSize":false,"scale":1.3171920094823548,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"The model predicts next-token probabilities from context and learned weights: inference."}]}]}},"parentId":"page:page","index":"b0ATeX","typeName":"shape"},{"x":-266.42013941470077,"y":3201.5134959705,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:C97Rm2OTP6s-oKiQokk4L","type":"geo","props":{"w":2062.0761685956645,"h":1015.7394406509211,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"black","labelColor":"black","fill":"semi","size":"xl","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Key Terms and Boundaries"}]},{"type":"paragraph","content":[{"type":"text","text":"Agent: selects actions and uses tools toward a goal; persistent memory is optional."}]},{"type":"paragraph","content":[{"type":"text","text":"GenAI agent: an agent using a generative model."}]},{"type":"paragraph","content":[{"type":"text","text":"Chatbot: a conversational interface; it may also expose tools."}]},{"type":"paragraph","content":[{"type":"text","text":"Workflow: predefined control flow, which can include branches and model calls."}]},{"type":"paragraph","content":[{"type":"text","text":"Copilot: an assistive AI experience; not limited to SaaS."}]},{"type":"paragraph","content":[{"type":"text","text":"Authentication: who is calling?"}]},{"type":"paragraph","content":[{"type":"text","text":"Authorization: what may they do?"}]},{"type":"paragraph","content":[{"type":"text","text":"Secret: sensitive data, such as an API key."}]},{"type":"paragraph","content":[{"type":"text","text":"Credential: evidence used to authenticate; not every credential is secret (e.g., a public certificate)."}]},{"type":"paragraph","content":[{"type":"text","text":"Non-human identity: a software identity used by a service, bot or workload."}]},{"type":"paragraph","content":[{"type":"text","text":"Tool definition: name, description and input schema; treat third-party definitions as untrusted."}]},{"type":"paragraph","content":[{"type":"text","text":"Confused deputy: a privileged component tricked into misusing authority for another caller."}]}]}},"parentId":"page:page","index":"b0FxEU","typeName":"shape"},{"x":2710.384673079797,"y":2912.5016760711774,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:jDcFJeIKjcEJjcUcLSAkp","type":"text","props":{"color":"green","size":"xl","w":1139.0212895107202,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"MCP!!!"}]}]}},"parentId":"page:page","index":"b0HdnM","typeName":"shape"},{"x":2401.495849187292,"y":3001.777373124601,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Ukj1uk-1AVnj8DYxb1sc9","type":"geo","props":{"w":1741.9500265395584,"h":705.9774169859325,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"green","labelColor":"black","fill":"semi","size":"xl","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"MCP: Privileged Integration Boundary"}]},{"type":"paragraph","content":[{"type":"text","text":"MCP exposes tools and data; risks cross API, orchestration and application layers."}]},{"type":"paragraph","content":[{"type":"text","text":"The “domain controller” comparison is a training analogy, not a literal equivalence."}]},{"type":"paragraph","content":[{"type":"text","text":"Compromise can expose the credentials and resources reachable with the server’s permissions."}]},{"type":"paragraph","content":[{"type":"text","text":"Limit credentials per tool/task, validate authorization and restrict network/filesystem access."}]},{"type":"paragraph","content":[{"type":"text","text":"Common vectors: indirect prompt injection (LLM01:2025), confused deputy / excessive agency (LLM06:2025), tool poisoning (ASI02), and supply-chain compromise (ASI04)."}]},{"type":"paragraph","content":[{"type":"text","text":"Tool descriptions and updates can carry malicious instructions; pin and verify dependencies."}]}]}},"parentId":"page:page","index":"b0FzXMA","typeName":"shape"},{"x":3774.8623509134004,"y":3979.416714246332,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:eRQQZLXJTjFsp9g-KLMtB","type":"arrow","props":{"kind":"arc","elbowMidPoint":0.5,"dash":"draw","size":"xl","fill":"semi","color":"red","labelColor":"black","bend":0,"start":{"x":-9.774502363673037,"y":-676.568945272692},"end":{"x":-477.10964155058673,"y":-656.4234768414012},"arrowheadStart":"none","arrowheadEnd":"arrow","richText":{"type":"doc","content":[{"type":"paragraph"}]},"labelPosition":0.5,"font":"draw","scale":1},"parentId":"page:page","index":"b0FzqaTV","typeName":"shape"},{"meta":{},"id":"binding:f1j261hQohPSNsSI8TouZ","type":"arrow","fromId":"shape:eRQQZLXJTjFsp9g-KLMtB","toId":"shape:Ukj1uk-1AVnj8DYxb1sc9","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.5119723359511872,"y":0.3593941380618808},"snap":"none","terminal":"end"},"typeName":"binding"},{"meta":{},"id":"binding:bSR7WfnLRP6pS8ijMZuj9","type":"arrow","fromId":"shape:eRQQZLXJTjFsp9g-KLMtB","toId":"shape:Ukj1uk-1AVnj8DYxb1sc9","props":{"isPrecise":true,"isExact":false,"normalizedAnchor":{"x":0.7768779056019751,"y":0.4885283108049638},"snap":"none","terminal":"start"},"typeName":"binding"},{"x":3795.107895918999,"y":3273.595411730827,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:CQB93StiZRmxnZMDBxui0","type":"geo","props":{"w":200,"h":200,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"yellow","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"IMPORTANT!"}]}]}},"parentId":"page:page","index":"b0IcbE","typeName":"shape"},{"x":4185.17199402823,"y":1160,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:D3bUCVsQ48-qGx6mot8WA","type":"geo","props":{"w":1374,"h":290,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"OWASP LLM01:2025 — Prompt Injection"}]},{"type":"paragraph","content":[{"type":"text","text":"• Treat retrieved documents, tool results and external content as untrusted."}]},{"type":"paragraph","content":[{"type":"text","text":"• Instructions guide behavior; they are not an authorization boundary."}]},{"type":"paragraph","content":[{"type":"text","text":"• Use input/output inspection and AI guardrails as additional defenses."}]},{"type":"paragraph","content":[{"type":"text","text":"• Separate untrusted content in application-controlled templates; delimiters alone do not prevent injection."}]},{"type":"paragraph","content":[{"type":"text","text":"• Enforce least privilege and validate tool arguments outside the model."}]},{"type":"paragraph","content":[{"type":"text","text":"• Require approval for high-impact actions and test defenses with red teaming."}]}]}},"parentId":"page:page","index":"ao9HA","typeName":"shape"},{"x":1590,"y":603,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:A5UNuyUS7cRobLs_DJ70r","type":"geo","props":{"w":563,"h":62,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"AI coding: own code review and deployed security"}]}]}},"parentId":"page:page","index":"aLbi6","typeName":"shape"},{"gridSize":10,"name":"Thu 10:27 AM","meta":{"storageUsedPercentage":1},"id":"document:document","typeName":"document"},{"x":2167.988122577083,"y":-17.71334733520078,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:C3EAQmqeG7Eb0dR-s0Ece","type":"text","props":{"color":"red","size":"xl","w":2108.593620663992,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"AI Security Mind Map: By Jordan L. Warren"}]}]}},"parentId":"page:page","index":"b0K9Cr","typeName":"shape"},{"x":1836.8347623185782,"y":1985.6712104804246,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:ykwWX-PVHhQjnxPA92ykC","type":"geo","props":{"w":402.3807206004717,"h":371.9302876901661,"geo":"diamond","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"violet","labelColor":"black","fill":"semi","size":"l","font":"draw","align":"middle","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Detokenization"}]}]}},"parentId":"page:page","index":"b09NuI","typeName":"shape"},{"x":4196.838792616907,"y":514.5919587379728,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:K0BChUpcZqXdNl3bvF_sX","type":"geo","props":{"w":1336,"h":621.8041289535939,"geo":"rectangle","dash":"draw","growY":5.195871046406069,"url":"","scale":1,"flipX":false,"flipY":false,"color":"black","labelColor":"black","fill":"none","size":"l","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Claude Code: Layered Controls"}]},{"type":"paragraph","content":[{"type":"text","text":"• Use /sandbox for filesystem and network boundaries; configure and test them."}]},{"type":"paragraph","content":[{"type":"text","text":"• Permissions and prompt-injection safeguards reduce risk; they do not guarantee prevention."}]},{"type":"paragraph","content":[{"type":"text","text":"• Review generated code and risky actions. Restrict credentials, tools and network destinations."}]},{"type":"paragraph","content":[{"type":"text","text":"• Verify retention and training terms for the specific account and service."}]},{"type":"paragraph","content":[{"type":"text","text":"• Use trusted MCP servers; inspect their permissions and dependencies."}]},{"type":"paragraph","content":[{"type":"text","text":"• PHI requires an applicable BAA and eligible, correctly configured services. Netskope controls do not replace these requirements."}]},{"type":"paragraph","content":[{"type":"text","text":"• Apply DLP/AI guardrails where supported, plus secure development checks."}]},{"type":"paragraph","content":[{"type":"text","text":"Source: https://code.claude.com/docs/en/security"}]},{"type":"paragraph","content":[{"type":"text","text":"HIPAA eligibility: https://support.claude.com/en/articles/8114513"}]}]}},"parentId":"page:page","index":"b0J5Ob","typeName":"shape"},{"x":-334.97173400048155,"y":1280.6961472254195,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:RenTqQ_HEScoGuX5miLeQ","type":"text","props":{"color":"red","size":"xl","w":950.1604516916734,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","content":[{"type":"paragraph","content":[{"type":"text","text":"Simplified LLM Processing Flow"}]}]}},"parentId":"page:page","index":"ayIAb","typeName":"shape"},{"x":2934.6555601430614,"y":368.45569805562076,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:NGQEH-0-6apQ80coXSFqm","type":"text","props":{"color":"black","size":"xl","w":588,"font":"draw","textAlign":"middle","autoSize":false,"scale":1,"richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"Quick Start Attacker’s Dictionary"}]}]}},"parentId":"page:page","index":"aWxYv","typeName":"shape"},{"x":4202.664617049795,"y":2290.4401691886087,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Jyznk172ei4KBV40z9oWZ","type":"geo","props":{"w":1344.2695963263977,"h":1024.6131318071689,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"blue","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"paragraph","attrs":{"dir":"auto"},"content":[{"type":"text","text":"OWASP Agentic Top 10 (2026): risk categories, not sequential attack stages."}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI01: "},{"type":"text","marks":[{"type":"underline"}],"text":"Agent Goal Hijack"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Attacker redirects the agent’s objective with manipulated inputs"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Agent Scale prompt injection"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI02: "},{"type":"text","marks":[{"type":"underline"}],"text":"Tool Misuse and Exploitation"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Agent uses legit tools with unsafe parameters"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"No controls or allowlists or schemas for tools"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI03: "},{"type":"text","marks":[{"type":"underline"}],"text":"Identity and Privilege Abuse"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Agents may use service accounts or delegated user identities."}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Overprivileged identities may aggregate access beyond a "},{"type":"text","marks":[{"type":"italic"}],"text":"single"},{"type":"text","text":" human "}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Need per user/per task credential scoping"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI04: "},{"type":"text","marks":[{"type":"underline"}],"text":"Agentic Supply Chain Vulnerabilities"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Compromised 3rd-party components that influence agent behavior"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Need signed tool manifests, pinned versions for models, and Integrity checks"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI05: "},{"type":"text","marks":[{"type":"underline"}],"text":"Unexpected Code Execution"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Sandbox execution; deny egress by default and allow only required destinations."}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI06: "},{"type":"text","marks":[{"type":"underline"}],"text":"Memory and Context Poisoning"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Runtime corruption of agent memory (scratchpads/vector stores)"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI07: "},{"type":"text","marks":[{"type":"underline"}],"text":"Insecure Inter-Agent Communication"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Unauthenticated or unencrypted agent channels permit tampering."}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Need mutual TLS, signed messages, and strict audit logs"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI08: "},{"type":"text","marks":[{"type":"underline"}],"text":"Cascading Failures"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Small error is amplified as agents treat output as trusted input throughout agent worker workflows"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Need Circuit breakers and independent validation"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI09: "},{"type":"text","marks":[{"type":"underline"}],"text":"Human-Agent Trust Exploitation"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"When LLMs make bad decisions sound reasonable"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Have agents show the diffs and raw evidence and not just words alone"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"},{"type":"underline"}],"text":"ASI10: "},{"type":"text","marks":[{"type":"underline"}],"text":"Rogue Agents"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Agents act outside intended goals, permissions or oversight."}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Need Fleet level observability, anomaly detection, and human kill switch"}]}]}]}]}]}]}},"parentId":"page:page","index":"avmKj","typeName":"shape"},{"x":4188.394239169473,"y":3439.8897074377082,"rotation":0,"isLocked":false,"opacity":1,"meta":{},"id":"shape:Q2w9eN7PRNA9Cud5igJ9v","type":"geo","props":{"w":1355.6858986306556,"h":692,"geo":"rectangle","dash":"draw","growY":0,"url":"","scale":1,"flipX":false,"flipY":false,"color":"red","labelColor":"black","fill":"semi","size":"m","font":"draw","align":"start","verticalAlign":"middle","richText":{"type":"doc","attrs":{"dir":"auto"},"content":[{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A01: Broken Access Control"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Can someone act as another person by changing the ID in the URL?"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A02: Security Misconfiguration"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Is anything running with default creds? Admin panel exposed? Debug mode open?"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"highlight"}],"text":"Check CORS against data sensitivity; disable public debug output and enforce admin authorization."}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A03: Software Supply Chain Failures"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Do I know whats in the package the LLM told me to install?"}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"bold"}],"text":"SlopSquatting: "},{"type":"text","text":"Attackers registering LLM-hallucinated package names"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A04: Cryptographic Failures"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Use established password hashing and encryption; manage keys securely."}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A05: Injection"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Am I concatenating user input into a query, shell command, or HTML string?"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A06: Insecure Design"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Is the underlying design of this secure even if all code is perfect?"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A07: Authentication Failures"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Can someone log in without proving who they really are/ stay logged in forever?"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A08: Software or Data Integrity Failures"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"Are code, updates and data artifacts verified before they are trusted?"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A09: Security Logging and Alerting Failures"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"If someone was attacking us right now would I ever know?"}]}]}]}]},{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","marks":[{"type":"underline"}],"text":"A10: Mishandling of Exceptional Conditions"}]},{"type":"orderedList","attrs":{"dir":"auto","start":1,"type":null},"content":[{"type":"listItem","attrs":{"dir":"ltr"},"content":[{"type":"paragraph","attrs":{"dir":"ltr"},"content":[{"type":"text","text":"If worst case happens, does the app fail safe or fail open"}]}]}]}]}]}]}},"parentId":"page:page","index":"axKza","typeName":"shape"}]}