Mitigating the OWASP Top 10 For Large Language Models Applications using Intelligent Agents
Mohammad Fasha, Faisal Abul Rub, Nasim Matar, Bilal Sowan, Mohammad Al Khaldy

TL;DR
This paper introduces a framework using LLM-enabled intelligent agents to proactively mitigate the OWASP Top 10 security vulnerabilities in large language model applications, enhancing their security and resilience.
Contribution
It proposes a novel framework leveraging intelligent agents to identify and counteract security threats in LLM applications, addressing a critical security gap.
Findings
Framework effectively identifies security threats in real-time
Enhances protection against OWASP Top 10 vulnerabilities
Provides a blueprint for future security improvements
Abstract
Large Language Models (LLMs) have emerged as a transformative and disruptive technology, enabling a wide range of applications in natural language processing, machine translation, and beyond. However, this widespread integration of LLMs also raised several security concerns highlighted by the Open Web Application Security Project (OWASP), which has identified the top 10 security vulnerabilities inherent in LLM applications. Addressing these vulnerabilities is crucial, given the increasing reliance on LLMs and the potential threats to data integrity, confidentiality, and service availability. This paper presents a framework designed to mitigate the security risks outlined in the OWASP Top 10. Our proposed model leverages LLM-enabled intelligent agents, offering a new approach to proactively identify, assess, and counteract security threats in real-time. The proposed framework serves as…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsWeb Application Security Vulnerabilities · Spam and Phishing Detection · Security and Verification in Computing
