~/talk

How to attack AI systems (and how to defend them) !!!!

Talkat DevConf.IN 2026 · on Friday, 2026-02-13· at 11:45· VYAS - G - Room#VY015· [security, large-language-models]
slides:none on file

Shows concrete attacks and concrete mitigations: data poisoning of public crawls that flips dog images into “fish,” physical adversarial patterns (printed dots on glasses, four stickers that hide stop signs) that fool vision models at inference, and jailbreaks/prompt injections that extract harmful instructions. Uses FGSM and public web‑crawl datasets as attack tools, and defends with guardrails, privileged vs quarantine LLMs, adaptive guardrails and mandatory human‑in‑the‑loop checks rather than vague promises.

AI-written summary · about

  1. 0:00Introduction
  2. 1:51AI dual-use explained
  3. 5:26ML pipeline attacks
  4. 8:15Adversarial examples
  5. 13:55Jailbreak and prompt injection
  6. 20:44Prompt injection in agents
  7. 24:19Defending AI systems
  8. 28:00AI security trade-offs
  9. 33:42AI usage precautions
  10. 36:54AI security updates
  11. 41:32Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.