OWASP LLM应用程序十大安全风险（2025）(1) conv.docxVIP

亯??????

OWASP???????????Top10?亯???2023?θ?ж亯??????????θ??

シ????ф????????????从??亯?????θLLMδ???????ε??????

????????θ?????伄???у??????LLM??у???????????????

?亼?θ???????щ?у???????╅?θ???????????

2023????????儎???LLM???从?????????LLM???????????

?????θ???〥?????僂??2025???????θ??ф?????????????

??????????θ?????ж??????ぁ????伄???????????фLLM??

???щ?????侾??ж????????????????????????????????

??

2025????????

2025??????????????伄????????θ????LLM??????????

??????θ“?????δUnboundedConsumptionε”?ж????????“????

δDenialofServiceε”伄?θу??????????伄?θ????????LLM??????

???????从?

“?????δVectorandEmbeddingsε”?????????????????δRAGε???

?????????????????????????????????

??????“??????δSystemPromptLeakageε”?ж伄?亯θ??????????

??????????ж?从??????儎???θ?????????????????θ???

?????θ????у????????????????????

1

??θ“?????δExcessiveAgencyε”?ж伄?亯?????θ????????????

???????????сθLLM????????????LLM?????????????θ??

??????????????儎伄???θ???ж伄??????????????

????

↙?LLM????ж?θ??????????????僂??????????у???亼??

???????〇?????щ????θ????????????????????ぁ?????

?????ф??????OWASPTop10forLLMApplicationsv2.02025???θ???????

??????????θ????????LLM????

??θ???????????亯????????θ?????????у????ж???щ

??????????ф?ж?θ????LLM??ぁ???????

SteveWilsonδOWASP?????????ぁ?Top10亯????ε

LinkedIn:/in/wilsonsd/

AdsDawsonδOWASP?????????ぁ?Top10?????╅??????ε

LinkedIn:/in/adamdawson0/

2

??亯????

2024θ?????????グ??????????θAI?????????????????

??????????????????????????????????θ??????θ???

?????人???????????????????????у???????????????

??θ?????????????????????θ????????????????????

???AI??????????????????伄????θ???亴???????????AI

?????????θ??????????????????θ??亯??LLM???????伄?

??????θ???????????????????θ????AI????伄???????θ

???????ぁ?????θ???亯???AI????????????????

??δ亯????/OWASP?????????ε

??δ亯???ε

??/??δ亯???ε

3

??亯??????.............................................................................................................................................................................................1

??亯????...................