LLM specific measures / prompt injection

[ioggstream]

Question

• Do we need LLM specific measures (e.g. prompt injection)
• Is it associated with API / DAST

Notes

See also:

• https://github.com/NVIDIA/garak
• https://github.com/promptfoo/promptfoo

[wurstbrot]

Hi @ioggstream,

I think we will need it and I assume that DSOMM-users expect an extra dimension. In that dimension, I think it needs subdimensions regarding secure coding used by developers and "just" operating an LLM which user supplied data.

[wurstbrot]

See also #80