https://www.hansking.cn/blog A posts created with Next.js and Tailwind.css en-us admin@hansking.cn (HANS) admin@hansking.cn (HANS) Sun, 13 Oct 2024 10:00:00 GMT https://www.hansking.cn/blog/2026/LLM-an-quan-PromptInjection-yu-yue-quan-gong-ju-diao-yong https://www.hansking.cn/blog/2026/LLM-an-quan-PromptInjection-yu-yue-quan-gong-ju-diao-yong [{"value":"LLM 安全：Prompt Injection 与越权工具调用","url":"#llm-安全prompt-injection-与越权工具调用","depth":1},{"value":"一、直接注入和间接注入","url":"#一直接注入和间接注入","depth":2},{"value":"二、为什么模型很难天然区分指令和数据","url":"#二为什么模型很难天然区分指令和数据","depth":2},{"value":"三、先画清数据流和信任边界","url":"#三先画清数据流和信任边界","depth":2},{"value":"四、最小权限是最有效的防线","url":"#四最小权限是最有效的防线","depth":2},{"value":"五、工具调用要有二次确认","url":"#五工具调用要有二次确认","depth":2},{"value":"六、RAG 的安全重点是检索前后两道门","url":"#六rag-的安全重点是检索前后两道门","depth":2},{"value":"七、浏览器和代码执行是高风险组合","url":"#七浏览器和代码执行是高风险组合","depth":2},{"value":"八、输出过滤挡不住已经发生的副作用","url":"#八输出过滤挡不住已经发生的副作用","depth":2},{"value":"九、检测注入要看行为，不只看文本","url":"#九检测注入要看行为不只看文本","depth":2},{"value":"十、用攻击样本做持续测试","url":"#十用攻击样本做持续测试","depth":2},{"value":"十一、日志和凭证管理决定事故能否收敛","url":"#十一日志和凭证管理决定事故能否收敛","depth":2},{"value":"十二、我的总结：不要试图把模型变成防火墙","url":"#十二我的总结不要试图把模型变成防火墙","depth":2}] Sun, 13 Oct 2024 10:00:00 GMT admin@hansking.cn (HANS) AILLM安全Prompt InjectionAgent