Opis
As organizations deploy LLMs and AI agents into production, traditional security testing fails to keep pace. AI Red Teaming in Practice gives you the structured methodology and hands-on skills to assess these systems effectively.Written by a practitioner who discovered critical vulnerabilities in production AI systems contributed to OWASP GenAI security guides, this book takes you from foundational concepts through advanced exploitation and campaign automation. You will learn why AI systems fail in ways that go beyond unauthorized access, including biased outputs, unreliable behavior, and misaligned actions that cause real business damage. You learn to threat model any GenAI system, define scope, and build a prioritized test plan. A purpose-built lab, the TechCorp AI Recruiting Assistant, runs throughout the book. This agentic system combines RAG retrieval, tool calling, and multi-role access, giving you a realistic target for chapters covering reconnaissance, fingerprinting, prompt injection, data extraction, tool exploitation, and supply chain assessment. Final chapters cover campaign design, PyRIT integration, and reporting strategies for executives, engineers, and auditors.
By the end, you will be equipped to plan and execute professional AI red team engagements against any generative AI deployment.