Security & Privacy
PII.md · 22 documents
README
Describes an enterprise AI security gateway that detects and masks PII before data reaches LLM services, with a Java backend and React frontend.
Advanced Module 9: AI Security Fundamentals
Guides a 45-minute workshop and 75-minute self-paced exercises on assessing and hardening AI system security, covering PII handling, red teaming, and multi-agent architecture.
Annex A.8: Technological Controls
Maps 34 ISO 27001 Annex A.8 technological controls to a WordPress plugin project, marking 30 as fully implemented.
Security and Compliance
Documents the security architecture, controls, and compliance frameworks for an LLM Gateway service.
Chatbot & Prompt Injection Pentesting Playbook
Documents 11 attack categories and 5-phase methodology for testing chatbot and LLM prompt injection vulnerabilities.
Domain 3: Data Security and Access Control (15-20%)
Maps the AWS Data Engineer exam domain on data security and access control, covering encryption, IAM, network security, and monitoring.
Security and IAM for GenAI
Covers IAM least privilege, data masking, anonymization, key salting, and IAM user/group rules for GenAI pipelines on AWS.
Secure Data Sharing
Defines a framework for controlled data exchange in banking, covering scenarios, controls, agreements, and regulatory requirements.
Security Overview
Documents the security architecture, practices, and procedures for an AI knowledge website system.
Claude Code PII Detection and Masking Guide
Teaches PII detection and masking using regex, NER, and Claude Code skills, with code examples for email, phone, and credit card masking.
Security Architecture - Weaver AI
Documents a 10-layer defense-in-depth security architecture for an AI agent platform, covering threat models, controls, and compliance.
Securing Your AI: Protecting Customer Data and Business Secrets
Teaches small business owners practical strategies for securing AI systems, protecting customer data, and defending against emerging threats.
🔐 Encryption & Hashing Reference Guide
Defines a multi-layer password hashing scheme, AES-256-GCM data encryption, ECDH key exchange, and field-level PII protection with blind indexes.
15.3 Security & Compliance
Defines authentication, authorization, encryption, PII redaction, compliance frameworks, and incident response for a log platform.
Security Overview
Documents a security module with PII scanning, data masking, encryption, RBAC, and tamper-evident audit logging.
Sensitive Data Masking in Logs
Defines a logging system that automatically redacts sensitive fields and values from application logs while preserving debug usefulness.
Golang Vulnerability Report: Logging PII or Wallet Addresses (`log-pii-wallet`)
Documents the log-pii-wallet vulnerability, explains how PII and wallet addresses leak into logs, and provides CVSS scoring and remediation guidance.
MCP Security & Access Control Analysis
Analyses security gaps in an MCP server exposing Oracle procurement data, listing vulnerabilities and fixes.
4.5_Appendix_E
Maps AI-specific threats to SAIF components, CVEs, and CWEs for penetration testers, linking exploit paths to root causes and remediation.
PII Handling Security Expertise Module
Defines PII classification, encryption, masking, and breach response patterns for AI agents and development teams.
C13.6: DAG Visualization & Workflow Security
Defines five security requirements for DAG visualization systems, covering sanitization, access control, integrity, injection prevention, and DoS mitigation.
index
Promotes Microsoft Presidio for PII detection and redaction, and pitches OctaByte's managed deployment service.