Preparing for 0.5 launch

OWASP · Jul 2, 2023 · 36bf10d · 36bf10d
1 parent f57ed4c
commit 36bf10d
Show file tree

Hide file tree

Showing 51 changed files with 8 additions and 5 deletions.
diff --git a/.DS_Store b/.DS_Store
diff --git a/0_5_vulns/AdsDawson_DataLeakage.md → Archive/0_5_vulns/AdsDawson_DataLeakage.md b/0_5_vulns/AdsDawson_DataLeakage.md → Archive/0_5_vulns/AdsDawson_DataLeakage.md
diff --git a/...dsDawson_LLM10_Training_Data_Poisoning.md → ...dsDawson_LLM10_Training_Data_Poisoning.md b/...dsDawson_LLM10_Training_Data_Poisoning.md → ...dsDawson_LLM10_Training_Data_Poisoning.md
diff --git a/...AdsDawson_Overreliance_LLM_Gen_Content.md → ...AdsDawson_Overreliance_LLM_Gen_Content.md b/...AdsDawson_Overreliance_LLM_Gen_Content.md → ...AdsDawson_Overreliance_LLM_Gen_Content.md
diff --git a/0_5_vulns/AdsDawson_Priv_Escalation_CSRF.md → ...5_vulns/AdsDawson_Priv_Escalation_CSRF.md b/0_5_vulns/AdsDawson_Priv_Escalation_CSRF.md → ...5_vulns/AdsDawson_Priv_Escalation_CSRF.md
diff --git a/0_5_vulns/AdsDawson_RCE_SSRF.md → Archive/0_5_vulns/AdsDawson_RCE_SSRF.md b/0_5_vulns/AdsDawson_RCE_SSRF.md → Archive/0_5_vulns/AdsDawson_RCE_SSRF.md
diff --git a/0_5_vulns/AlekseiRyzhkov_Inexplicability.md → ...5_vulns/AlekseiRyzhkov_Inexplicability.md b/0_5_vulns/AlekseiRyzhkov_Inexplicability.md → ...5_vulns/AlekseiRyzhkov_Inexplicability.md
diff --git a/0_5_vulns/AndySmith_ExcessiveAgency.md → ...ve/0_5_vulns/AndySmith_ExcessiveAgency.md b/0_5_vulns/AndySmith_ExcessiveAgency.md → ...ve/0_5_vulns/AndySmith_ExcessiveAgency.md
diff --git a/0_5_vulns/DavidRowe_LLM01_PromptInjection.md → ..._vulns/DavidRowe_LLM01_PromptInjection.md b/0_5_vulns/DavidRowe_LLM01_PromptInjection.md → ..._vulns/DavidRowe_LLM01_PromptInjection.md
diff --git a/0_5_vulns/DavidRowe_LLM02_DataLeakage.md → .../0_5_vulns/DavidRowe_LLM02_DataLeakage.md b/0_5_vulns/DavidRowe_LLM02_DataLeakage.md → .../0_5_vulns/DavidRowe_LLM02_DataLeakage.md
diff --git a/...s/DavidRowe_LLM03_InadequateSandboxing.md → ...s/DavidRowe_LLM03_InadequateSandboxing.md b/...s/DavidRowe_LLM03_InadequateSandboxing.md → ...s/DavidRowe_LLM03_InadequateSandboxing.md
diff --git a/...idRowe_LLM04_UnauthorizedCodeExecution.md → ...idRowe_LLM04_UnauthorizedCodeExecution.md b/...idRowe_LLM04_UnauthorizedCodeExecution.md → ...idRowe_LLM04_UnauthorizedCodeExecution.md
diff --git a/...ns/DavidRowe_LLM05_SSRFVulnerabilities.md → ...ns/DavidRowe_LLM05_SSRFVulnerabilities.md b/...ns/DavidRowe_LLM05_SSRFVulnerabilities.md → ...ns/DavidRowe_LLM05_SSRFVulnerabilities.md
diff --git a/...Rowe_LLM06_OverrelianceOnLLMGenContent.md → ...Rowe_LLM06_OverrelianceOnLLMGenContent.md b/...Rowe_LLM06_OverrelianceOnLLMGenContent.md → ...Rowe_LLM06_OverrelianceOnLLMGenContent.md
diff --git a/.../DavidRowe_LLM07_InadequateAIAlignment.md → .../DavidRowe_LLM07_InadequateAIAlignment.md b/.../DavidRowe_LLM07_InadequateAIAlignment.md → .../DavidRowe_LLM07_InadequateAIAlignment.md
diff --git a/...idRowe_LLM08_InsufficientAccessControl.md → ...idRowe_LLM08_InsufficientAccessControl.md b/...idRowe_LLM08_InsufficientAccessControl.md → ...idRowe_LLM08_InsufficientAccessControl.md
diff --git a/.../DavidRowe_LLM09_ImproperErrorHandling.md → .../DavidRowe_LLM09_ImproperErrorHandling.md b/.../DavidRowe_LLM09_ImproperErrorHandling.md → .../DavidRowe_LLM09_ImproperErrorHandling.md
diff --git a/.../DavidRowe_LLM10_TrainingDataPoisoning.md → .../DavidRowe_LLM10_TrainingDataPoisoning.md b/.../DavidRowe_LLM10_TrainingDataPoisoning.md → .../DavidRowe_LLM10_TrainingDataPoisoning.md
diff --git a/0_5_vulns/GTK_InsecureHandlingofLLMOutput.md → ..._vulns/GTK_InsecureHandlingofLLMOutput.md b/0_5_vulns/GTK_InsecureHandlingofLLMOutput.md → ..._vulns/GTK_InsecureHandlingofLLMOutput.md
diff --git a/0_5_vulns/GTK_LLMAgentHijack.md → Archive/0_5_vulns/GTK_LLMAgentHijack.md b/0_5_vulns/GTK_LLMAgentHijack.md → Archive/0_5_vulns/GTK_LLMAgentHijack.md
diff --git a/0_5_vulns/GTK_PromptInjection.md → Archive/0_5_vulns/GTK_PromptInjection.md b/0_5_vulns/GTK_PromptInjection.md → Archive/0_5_vulns/GTK_PromptInjection.md
diff --git a/...hnSotiropoulos_AdversarialInputAttacks.md → ...hnSotiropoulos_AdversarialInputAttacks.md b/...hnSotiropoulos_AdversarialInputAttacks.md → ...hnSotiropoulos_AdversarialInputAttacks.md
diff --git a/...tiropoulos_AdversarialModelRepurposing.md → ...tiropoulos_AdversarialModelRepurposing.md b/...tiropoulos_AdversarialModelRepurposing.md → ...tiropoulos_AdversarialModelRepurposing.md
diff --git a/0_5_vulns/JohnSotiropoulos_DataPoisoning.md → ...5_vulns/JohnSotiropoulos_DataPoisoning.md b/0_5_vulns/JohnSotiropoulos_DataPoisoning.md → ...5_vulns/JohnSotiropoulos_DataPoisoning.md
diff --git a/...JohnSotiropoulos_InsecureExtensibility.md → ...JohnSotiropoulos_InsecureExtensibility.md b/...JohnSotiropoulos_InsecureExtensibility.md → ...JohnSotiropoulos_InsecureExtensibility.md
diff --git a/0_5_vulns/JohnSotiropoulos_ModelStealing.md → ...5_vulns/JohnSotiropoulos_ModelStealing.md b/0_5_vulns/JohnSotiropoulos_ModelStealing.md → ...5_vulns/JohnSotiropoulos_ModelStealing.md
diff --git a/0_5_vulns/JohnSotiropoulos_ModelTampering.md → ..._vulns/JohnSotiropoulos_ModelTampering.md b/0_5_vulns/JohnSotiropoulos_ModelTampering.md → ..._vulns/JohnSotiropoulos_ModelTampering.md
diff --git a/...JohnSotiropoulos_SensitiveDataExposure.md → ...JohnSotiropoulos_SensitiveDataExposure.md b/...JohnSotiropoulos_SensitiveDataExposure.md → ...JohnSotiropoulos_SensitiveDataExposure.md
diff --git a/...JohnSotiropoulos_VulnerableSupplyChain.md → ...JohnSotiropoulos_VulnerableSupplyChain.md b/...JohnSotiropoulos_VulnerableSupplyChain.md → ...JohnSotiropoulos_VulnerableSupplyChain.md
diff --git a/0_5_vulns/KenHuang_DoS_Attack_LLM.md → Archive/0_5_vulns/KenHuang_DoS_Attack_LLM.md b/0_5_vulns/KenHuang_DoS_Attack_LLM.md → Archive/0_5_vulns/KenHuang_DoS_Attack_LLM.md
diff --git a/0_5_vulns/LeonDerczynski_ModelDoS.md → Archive/0_5_vulns/LeonDerczynski_ModelDoS.md b/0_5_vulns/LeonDerczynski_ModelDoS.md → Archive/0_5_vulns/LeonDerczynski_ModelDoS.md
diff --git a/0_5_vulns/Manjesh_ModelTheft.md → Archive/0_5_vulns/Manjesh_ModelTheft.md b/0_5_vulns/Manjesh_ModelTheft.md → Archive/0_5_vulns/Manjesh_ModelTheft.md
diff --git a/0_5_vulns/PriyaP_InsecureDesign.md → Archive/0_5_vulns/PriyaP_InsecureDesign.md b/0_5_vulns/PriyaP_InsecureDesign.md → Archive/0_5_vulns/PriyaP_InsecureDesign.md
diff --git a/...chHarang_ImproperLLMOutputSanitization.md → ...chHarang_ImproperLLMOutputSanitization.md b/...chHarang_ImproperLLMOutputSanitization.md → ...chHarang_ImproperLLMOutputSanitization.md
diff --git a/.../RichHarang_ImproperPermissionHandling.md → .../RichHarang_ImproperPermissionHandling.md b/.../RichHarang_ImproperPermissionHandling.md → .../RichHarang_ImproperPermissionHandling.md
diff --git a/...hHarang_ImproperPluginParameterization.md → ...hHarang_ImproperPluginParameterization.md b/...hHarang_ImproperPluginParameterization.md → ...hHarang_ImproperPluginParameterization.md
diff --git a/0_5_vulns/RossMoore_LLM_Unavailable.md → ...ve/0_5_vulns/RossMoore_LLM_Unavailable.md b/0_5_vulns/RossMoore_LLM_Unavailable.md → ...ve/0_5_vulns/RossMoore_LLM_Unavailable.md
diff --git a/0_5_vulns/SteveWilson_AdversarialAttacks.md → ...5_vulns/SteveWilson_AdversarialAttacks.md b/0_5_vulns/SteveWilson_AdversarialAttacks.md → ...5_vulns/SteveWilson_AdversarialAttacks.md
diff --git a/0_5_vulns/SteveWilson_DataPoisoning.md → ...ve/0_5_vulns/SteveWilson_DataPoisoning.md b/0_5_vulns/SteveWilson_DataPoisoning.md → ...ve/0_5_vulns/SteveWilson_DataPoisoning.md
diff --git a/...ns/SteveWilson_IndirectPromptInjection.md → ...ns/SteveWilson_IndirectPromptInjection.md b/...ns/SteveWilson_IndirectPromptInjection.md → ...ns/SteveWilson_IndirectPromptInjection.md
diff --git a/0_5_vulns/SteveWilson_OutputFiltering.md → .../0_5_vulns/SteveWilson_OutputFiltering.md b/0_5_vulns/SteveWilson_OutputFiltering.md → .../0_5_vulns/SteveWilson_OutputFiltering.md
diff --git a/0_5_vulns/SteveWilson_Overreliance.md → ...ive/0_5_vulns/SteveWilson_Overreliance.md b/0_5_vulns/SteveWilson_Overreliance.md → ...ive/0_5_vulns/SteveWilson_Overreliance.md
diff --git a/0_5_vulns/SteveWilson_PromptInjection.md → .../0_5_vulns/SteveWilson_PromptInjection.md b/0_5_vulns/SteveWilson_PromptInjection.md → .../0_5_vulns/SteveWilson_PromptInjection.md
diff --git a/0_5_vulns/SteveWilson_TrainingDataLeakage.md → ..._vulns/SteveWilson_TrainingDataLeakage.md b/0_5_vulns/SteveWilson_TrainingDataLeakage.md → ..._vulns/SteveWilson_TrainingDataLeakage.md
diff --git a/...icientAuthorizationInDownstreamSystems.md → ...icientAuthorizationInDownstreamSystems.md b/...icientAuthorizationInDownstreamSystems.md → ...icientAuthorizationInDownstreamSystems.md
diff --git a/...WillChilcutt_CrossPluginRequestForgery.md → ...WillChilcutt_CrossPluginRequestForgery.md b/...WillChilcutt_CrossPluginRequestForgery.md → ...WillChilcutt_CrossPluginRequestForgery.md
diff --git a/0_5_vulns/_instructions.md → Archive/0_5_vulns/_instructions.md b/0_5_vulns/_instructions.md → Archive/0_5_vulns/_instructions.md
diff --git a/0_5_vulns/_template.md → Archive/0_5_vulns/_template.md b/0_5_vulns/_template.md → Archive/0_5_vulns/_template.md
diff --git a/index.md b/index.md
@@ -9,13 +9,13 @@ pitch: Aims to educate developers, designers, architects, managers, and organiza
 
 ---
 
-The OWASP Top 10 for Large Language Model Applications project aims to educate developers, designers, architects, managers, and organizations about the potential security risks when deploying and managing Large Language Models (LLMs). The project provides a list of the top 10 most critical vulnerabilities often seen in LLM applications, highlighting their potential impact, ease of exploitation, and prevalence in real-world applications. Examples of vulnerabilities include prompt injections, data leakage, inadequate sandboxing, and unauthorized code execution, among others. The goal is to raise awareness of these vulnerabilities, suggest remediation strategies, and ultimately improve the security posture of LLM applications. 
+The OWASP Top 10 for Large Language Model Applications project aims to educate developers, designers, architects, managers, and organizations about the potential security risks when deploying and managing Large Language Models (LLMs). The project provides a list of the top 10 most critical vulnerabilities often seen in LLM applications, highlighting their potential impact, ease of exploitation, and prevalence in real-world applications. Examples of vulnerabilities include prompt injections, data leakage, inadequate sandboxing, and unauthorized code execution, among others. The goal is to raise awareness of these vulnerabilities, suggest remediation strategies, and ultimately improve the security posture of LLM applications. You can read our [group charter](https://github.com/OWASP/www-project-top-10-for-large-language-model-applications/wiki/Charter) for more information
 
-Review the [draft Top 10 list version 0.1](descriptions) to understand work that has been done to date.
+Review the [draft Top 10 list version 0.5](assets/PDF/OWASP-Top-10-for-LLMs-2023-v05.pdf) to understand work that has been done to date.
 
 This initiative is community-driven and encourages participation and contributions from all interested parties. We are assembling the working group now.
 
 * We have a working group channel on the [OWASP Slack](https://owasp.org/slack/invite), so please sign up and then join us on the #project-top10-for-llm channel.
 * The working group is collaborating on our [wiki](https://github.com/OWASP/www-project-top-10-for-large-language-model-applications/wiki)
 
-New to LLM security?  Check out our [resources page](resources) to learn more.
+New to LLM security?  Check out our [resources page](https://github.com/OWASP/www-project-top-10-for-large-language-model-applications/wiki/Educational-Resources) to learn more.
diff --git a/info.md b/info.md
@@ -1,6 +1,9 @@
 ### Top 10 for Large Language Model Applications Information
 * [Incubator Project](https://owasp.org/projects/)
-* [Version 0.1.0](descriptions)
+* [Version 0.5.0](assets/PDF/OWASP-Top-10-for-LLMs-2023-v05.pdf)
+* [Version 0.1.0](descriptions) (archived)
+
+assets/PDF/OWASP-Top-10-for-LLMs-2023-v05.pdf
 
 ### Social Links
 * [Announcement](https://www.linkedin.com/pulse/announcing-owasp-top-10-large-language-models-ai-project-steve-wilson/)

diff --git a/leaders.md b/leaders.md
@@ -1,2 +1,2 @@
 ### Leaders
-* [Steve Wilson](mailto:[email protected])
+* Steve Wilson [LinkedIn](https://www.linkedin.com/in/wilsonsd/) [Twitter](https://twitter.com/virtualsteve)