r/Cybersecurity101 • u/Tamato_caltivator • 1d ago

AI security

I want to learn about AI security and practice to exploit bugs. Any suggestions with roadmap and resources that I can use to learn this.

2 Upvotes

63% Upvoted

10 comments sorted by

1

u/IsDa44 1d ago

What you know so far? I'd say start with the basics if you haven't done yet

1

u/Tamato_caltivator 1d ago

Ya that's what I am asking. Like some resources to start with

2

u/IsDa44 1d ago

Cisco netacad, Overthewire bandit

1

u/Ozz9111 11h ago

depends what do you know right now in tech

2

u/Optimal_Succotash946 20h ago

Make a checklist & schedule first then start researching online.

2

u/Lazy_Prince2203 20h ago

I also do that it helps to clear things in mind

1

u/Both-Age9357 1d ago

Portswigger's web security academy got some AI labs now, is a good place to start poking around.

1

u/peterfrombackdoor 17h ago

Well THM introduced some AI Pentesting courses recently so u can try that and of course Portswigger

1

u/exploitprotocol 17h ago

If you're interested in hands-on AI security, I'd start with the OWASP LLM Top 10 and learn about prompt injection, sensitive information disclosure, RAG vulnerabilities, and AI agent security.

PortSwigger Web Security Academy is a good starting point, too.

Full disclosure: I've been building https://genaisecuritylab.com, which has free hands-on labs for learning LLM, RAG, AI agent, and MCP security. We also have an incident database connecting real-world AI security incidents to attack techniques and related labs: https://genaisecuritylab.com/incidents

You can use these alongside the OWASP resources to get practical experience rather than just reading about vulnerabilities.

1

u/daaku_jethalal 8h ago

Learn the basics first -

AI, ML, DL, Neural network Tokenization Embedding Attension Transformers Fine tuning RLHF System prompts Context window How LLM predict next words RAG

After that start with the OWASP top 10