Kirk Abbott
Cloud, AI, and security: research, projects, and notes.
NIST already publishes a CSF 2.0 map to the OWASP LLM Top 10. It is in a spreadsheet.
NIST publishes 169 mappings from the Cybersecurity Framework to the OWASP Top 10 for LLM Applications, then ships them inside an XLSX download whose URL says json and whose contents include 91 withdrawn elements from CSF 1.1. Here is what the data actually says once you get it out.
Packet to Prompt
One request traced end to end, from a laptop’s network card to a model’s response: the header values before and after every hop, the log record each sensor emits, what that sensor cannot see, and the ATT&CK and ATLAS techniques that abuse each step.
Scam-Call Detector
An LLM security pipeline on AWS. I wrote “prompt injection: mitigated” in its threat model, then built the thing that could prove me wrong.
About
U.S. Air Force cyber defense operator with a web and cloud development background, working on cloud security, architecture, and AI/ML.
Started in web development, moved into cyber defense, now pointing at the place where cloud architecture, security, and AI/ML overlap.
Read full about →