OWASP·21 min
Ads Dawson
Shows how to pentest AI applications by mapping data inputs, tool calls, and output rendering, with real cases where prompt injection led to data theft, XSS, and denial of service.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34OWASP talks from DEF CON 34.
1–4 of 4 talks
OWASP·21 min
Ads Dawson
Shows how to pentest AI applications by mapping data inputs, tool calls, and output rendering, with real cases where prompt injection led to data theft, XSS, and denial of service.
OWASP·36 min
Andra Lezza · Jon McCoy
Follows one malicious PDF resume through a hiring agent, showing how hidden instructions can hijack model context and move laterally across an enterprise workflow.
OWASP·40 min
Jim Manico
Introduces the OWASP AI Security Verification Standard, its 12 chapters of testable requirements, and how its three levels map to assurance needs.
OWASP·16 min
Carley Fant
Presents a method for researching protocols and standards, tracing claims back to primary sources and spotting the assumptions that shape a design.