29 / 70 · 07 Security Testing for AI Apps · Data Leakage Detection← prev⊞ allnext →☰ Read as one page
5.2Types of Data Leakage
| Type | Risk Level | Detection Method |
|---|---|---|
| Training data memorization | High | Prompt with known training data prefixes |
| System prompt extraction | Medium | Meta-prompts asking about instructions |
| Cross-session context leak | Critical | Multi-user concurrent testing |
| PII in responses | Critical | Regex + NER-based scanning |
| Copyrighted content | High | Plagiarism detection on outputs |
| Internal API/schema leaks | Medium | Probing for technical details |