- Jalanin semgrep buat juice shop
Piramida Security Testing
SAST/Unit Test → DAST → Adversarial/Red Team
Jangan lagi fokus sama use case test doang, tapi fokus juga sama abuse case test
Langkah read teaming
- Recon → Scanning, spider Owasp top 10 LLM
AI system Attack Surface Training data Prompt Injection Insecure output handling Excessive agency