Library › Book 7 › Capstone Project -- Complete Security Audit of an AI Application
Capstone Project -- Complete Security Audit of an AI Application
14.1🔒Project OverviewThis capstone project ties together everything you have learned. You will conduct a complete security audit of an AI application, following…
14.2🔒Phase 1: Threat Modeling (4 hours)Draw a data flow diagram for SupportBot Pro. Identify: - All entry points (user input, API calls, document uploads) - All data stores…
14.3🔒Phase 2: Automated Security Test Suite (8 hours)Build a test suite with at least 50 payloads covering: - 15 direct injection payloads (instruction override, delimiter, encoding…
14.4🔒Phase 3: CI Pipeline Configuration (4 hours)Create a complete CI security pipeline that includes: - Pre-commit hooks: GitLeaks, Semgrep quick scan - PR checks: Semgrep full scan with…
14.5🔒Phase 4: Compliance Assessment (4 hours)Since SupportBot Pro serves EU customers: - Classify the AI features by EU AI Act risk level - Implement transparency disclosure tests - If…
14.6🔒Phase 5: Security Audit Report (4 hours)Write a professional security audit report containing:
14.7🔒Grading Rubric
14.8🔒Q&ASelf-Assessment Quiz: Chapter 141. What are the five phases of the capstone project? 2. How should security findings be prioritized in the audit report? 3. Why is a data…
14.9🔒Career Translation- Executed a complete security audit of an AI-powered application covering STRIDE threat modeling, 50+ prompt injection payloads, 20+…
14.10🔒Q&AInterview Depth CheckPrompt: You are conducting a security audit of an AI application. Walk through your methodology from start to finish. What a strong answer…