LLM Application Security
Injection across trust boundaries, tool and sandbox escape, secret exposure and threat modelling for agents.
12concepts
108flashcards
88minutes of reading
- 01 Agent Identity and Workload Credentials Why an agent is a third party rather than a proxy for the user, what goes wrong when it authenticates with a shared long-lived key, and how workload identity replaces that key with an attested, short-lived credential that names the running process.
- 02 Human-in-the-Loop Authorisation Design Where to put the human in an agent's action path so that approval remains a real decision, why per-action prompts decay into rubber-stamping, and how budgets, reversibility tiers and batched review preserve the signal.
- 03 Secrets and Credentials in LLM Context Why anything placed in a model's context should be treated as disclosed to whoever can influence its output, how credential brokering keeps secrets out of the prompt entirely, and where secrets arrive uninvited through users, logs and indexed tools.