OWASP 2024 Global AppSec San Francisco

Since its launch in May 2023, the OWASP Top 10 for Large Language Models (LLMs) project has gained remarkable traction across various sectors, including mainstream commercial entities, government agencies, and media outlets. This project addresses the rapidly growing field of LLM applications, emphasizing the critical importance of security in AI development. Our work has resonated deeply within the community, leading to widespread adoption and integration of the Top 10 list into diverse AI frameworks and guidelines.


As we advance into the development of version 2 (v2) of the OWASP Top 10 for LLMs, this session will provide a comprehensive update on the progress made so far. Attendees will gain insights into how version 1 (v1) has been embraced by the wider community, including practical applications, case studies, and testimonials from key stakeholders who have successfully implemented the guidelines.


The session will dive into several key areas:

Adoption and Impact of v1: 

• Overview of how v1 has been utilized in various sectors.
  
• Case studies showcasing the integration of the Top 10 list into commercial, governmental, and academic projects.
  
• Feedback from users and organizations on the effectiveness and relevance of the list.
  

Progress on v2 Development: 

• An in-depth look at the ongoing development process for v2.
  
• Key changes and updates from v1 to v2, reflecting the evolving landscape of LLM security challenges.
  
• Methodologies and criteria used to refine and expand the list.
  

Community Involvement and Contributions: 

• Ways in which the community can get involved in the project.
  
• Opportunities for contributing to the development of v2, including participation in working groups, submitting case studies, and providing feedback.
  
• Upcoming events, webinars, and collaboration opportunities for those interested in shaping the future of LLM security.
  

Future Directions and Goals: 

• Long-term vision for the OWASP Top 10 for LLMs project.
  
• Strategic goals for enhancing the list’s impact and reach.
  
• Exploration of potential new areas of focus, such as emerging threats and mitigation strategies.
  

Attendees will leave this session with a clear understanding of the significant strides made since the project’s inception and the vital role it plays in ensuring secure AI application development. Additionally, they will be equipped with the knowledge and resources to actively participate in and contribute to the ongoing evolution of the OWASP Top 10 for LLMs.

This session is ideal for developers, security professionals, AI researchers, and anyone interested in the intersection of AI and cybersecurity. Join us to learn more about this critical initiative and discover how you can play a part in advancing the security of large language models.


By attending this session, participants will gain actionable insights and practical guidance on integrating the OWASP Top 10 for LLMs into their projects, ensuring robust security measures are in place to address the unique challenges posed by AI technologies.