AI News & TrendsOWASP Updates GenAI Guidance, Details 5 Prompt Injection Defenses
OWASP has updated its GenAI security guidance, listing prompt injection as a top risk and emphasizing the need for layered defenses instead of a single fix. The guidance suggests using model-level controls, like tagging untrusted text so the model treats it as data, and system-level controls, such as limiting what tools the model can access. Five practical controls are outlined, including separating untrusted text, using approval for risky actions, and testing for prompt injection attacks. Real-world incidents suggest these attacks may be common and show that combining multiple defenses works better than relying on one method. Some methods appear to greatly reduce attack success, but determined attackers might still find ways around simple protections.
