About this Event
AI systems create failure modes traditional security reviews often miss: prompt injection, sensitive data exposure, retrieval manipulation, unsafe tool use, overreliance on model output, and weak monitoring.
In this hands-on workshop, participants will threat model a realistic AI system: an internal RAG assistant that uses enterprise documents, a vector database, identity controls, logging, and a third-party LLM. Using OWASP Threat Dragon and OWASP AI threat references, participants will map the system, identify trust boundaries, surface AI-specific threats, prioritize the most consequential scenarios, and turn them into a practical risk backlog.
This is a working session, not a lecture. The goal is to move from vague AI risk concerns to concrete threats, controls, owners, and decisions.
Event venue & nearby stays
DeVos Place, 303 Monroe Ave. NW, Grand Rapids, United States
Concerts, fests, parties, meetups — all the happenings, one place.