PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing AI/ML safety and security trainings

blog.trailofbits.com | blog | #ai-security | #training | #machine-learning | #threat-modeling | #risk-assessment | #ml-ops
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits announced a two-day AI/ML security training covering fundamentals, tech stacks, vulnerabilities and remediation, risk assessment, threat modeling, and mitigations for AI/ML systems.
Published
Collected

Related coverage

blog · bishopfox.com
Your Worst Case Scenario: An Introduction to Threat Modeling
Joe Ward's introduction to threat modeling: the four key questions, frameworks like STRIDE, DREAD and OCTAVE, and why formalizing the process beats informal tribal knowledge.
blog · bugcrowd.com
AI lectures with Dr. Brumley Part 3 | Securing the AI attack surface
Part three of Bugcrowd's AI lecture series with Dr. Brumley maps AI threats along three axes — knowledge, position and goal — and surveys classical ML attacks and recent LLM-era incidents.
blog · netspi.com
Strategic Security Success with NetSPI’s New Threat Modeling Solution
NetSPI's new Threat Modeling service combines its proprietary methodology with STRIDE and PASTA in a six-step process to map trust zones, enumerate threats, and prioritize fixes early in development.
blog · netspi.com
Mobile Application Threat Modeling
Mobile platforms carry users' most intimate data, yet security is often an afterthought. NetSPI offers a threat modeling framework to evaluate mobile apps at design time or retroactively.
blog · blog.trailofbits.com
How Threat Modeling Could Have Prevented the $1.5B Bybit Hack
Trail of Bits argues the $1.5B Bybit hack stemmed from operational failures—compromised signer devices and manipulated transaction UIs—that threat modeling could have exposed.
blog · blog.trailofbits.com
Securing open-source infrastructure with OSTIF
Through OSTIF, Trail of Bits performs threat modeling and secure code reviews for critical open-source projects, including the Linux kernel, curl, KEDA, Eclipse Jetty, and Flux.
Back