Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Paper] Write code injection section #8

Open
ch3njust1n opened this issue May 30, 2023 · 2 comments
Open

[Paper] Write code injection section #8

ch3njust1n opened this issue May 30, 2023 · 2 comments
Assignees
Labels
documentation Improvements or additions to documentation good first issue Good for newcomers high priority medium paper

Comments

@ch3njust1n
Copy link
Owner

  1. What is code injection
  2. Types of code injection and examples
  3. How to execute a code injection
  4. Code injection with respect to metaprogramming
  5. How to prevent code injections
  6. How we're using code injection
  7. Citations (find papers on machine learning and cybersecurity or related papers)
@ch3njust1n ch3njust1n added high priority medium paper documentation Improvements or additions to documentation good first issue Good for newcomers labels May 31, 2023
@ch3njust1n
Copy link
Owner Author

ch3njust1n commented Jun 2, 2023

Think about:

  1. How to constrain generated code at run-time
  2. How to guarantee correctness of generated code at run-time
  3. How to induce and mitigate prompt injections that induce code injections at run-time

@ch3njust1n
Copy link
Owner Author

Look into secure design:
https://owasp.org/Top10/A04_2021-Insecure_Design/

Consider:

  1. How existing patterns can be applied to metaprogramming at runtime
  2. How existing patterns can be applied to metaprogramming at runtime with LLM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation good first issue Good for newcomers high priority medium paper
Projects
None yet
Development

No branches or pull requests

2 participants