Built on Fortune 500 experience, this guide delivers hands-on methods to secure generative AI with extensive coverage of RAG, agents, prompt injection, data pipelines, Zero Trust, and sustainable programs.
Includes the AI Under Attack Practitioner Toolkit, featuring chapter-specific Field Artifacts for real-world AI security practice.
Key Features:
- Defend LLMs, RAG, and autonomous agents against prompt injection, jailbreaks, and tool abuse
- Apply Zero Trust architecture to AI agents with tool access, memory, and goal-directed reasoning
- Run AI governance and red teaming programs aligned to NIST AI RMF, ISO 42001, and OWASP for LLMs
- Purchase of the print or Kindle book includes a free PDF eBook
Book Description:
Contrary to general AI texts or cybersecurity books with limited AI coverage, this guide offers a comprehensive dive into securing the generative AI ecosystem.
It moves through four parts: Foundations establishes why AI security is fundamentally different, covering threat modeling, attack surfaces, and core defense principles. Attacks provides deep technical examination of prompt injection, memory and context abuse, RAG system vulnerabilities, agent exploitation techniques, training data poisoning, and AI red teaming methodology. Building Secure AI Systems covers infrastructure and MLOps hardening, secure application and API design, defensive prompt engineering, guardrails with human oversight, supply chain integrity, and Zero Trust architecture for agents. Running AI Security Programs addresses governance, risk and compliance frameworks, security engineering practices, security operations, and building sustainable organizational capabilities. Throughout, you will gain access to practical insights and structured approaches applicable to real-world scenarios.
By the end, you will be able to design, implement, and maintain security programs for generative AI, defend against advanced threats, communicate risks to stakeholders, and establish governance ensuring secure, compliant operations across the lifecycle.
What You Will Learn:
- Identify AI-specific risks and clearly communicate them to business teams
- Defend models, data, RAG, and agents from threats like poisoning, prompt injection, jailbreaking, and data exfiltration
- Design resilient cloud/MLOps with Zero Trust, supply chain security, and isolation
- Build secure APIs, apps, and agents with strong auth, validation, and safe tool use
- Apply AI-focused GRC, alignment checks, bias mitigation, monitoring, and incident response
- Translate complex concepts into actionable steps, using threat intel and collaboration for lasting security
Who this book is for:
This book is for mid- to senior-level cybersecurity professionals, security architects, and tech leaders managing risks in generative AI deployments. It's also valuable for early-career practitioners, AI/ML engineers, red teamers, DevSecOps, governance specialists, compliance officers, and product stakeholders with foundational cybersecurity knowledge. Readers should have basic familiarity with security concepts, some exposure to cloud platforms (AWS, Azure, or GCP), and a fundamental grasp of AI/ML, though no prior AI security expertise is required.
Table of Contents
- Why AI Security Is Different
- Threat Modeling AI Systems
- The AI Attack Surface
- Foundations of AI Defense
- Anatomy of an AI System
- Prompt Injection and Jailbreaking
- Memory, Context, and State Abuse
- Attacks on RAG Systems
- Agent Architecture and Vulnerabilities
- Agent Exploitation Techniques
- Attacks on Training Data and Model Integrity
(N.B. Please use the Read Sample option to see further chapters)
外文書商品之書封，為出版社提供之樣本。實際出貨商品，以出版社所提供之現有版本為主。部份書籍，因出版社供應狀況特殊，匯率將依實際狀況做調整。
無庫存之商品，在您完成訂單程序之後，將以空運的方式為你下單調貨。為了縮短等待的時間，建議您將外文書與其他商品分開下單，以獲得最快的取貨速度，平均調貨時間為1~2個月。
為了保護您的權益，「三民網路書店」提供會員七日商品鑑賞期(收到商品為起始日)。
若要辦理退貨，請在商品鑑賞期內寄回，且商品必須是全新狀態與完整包裝(商品、附件、發票、隨貨贈品等)否則恕不接受退貨。
