“GenAI is rapidly ushering in a new wave of innovation, but this technology also poses serious privacy and security risks that need to be addressed,” said Ryan O’Leary, Research Director, Privacy and Legal Technology at IDC. “Securiti’s new LLM firewall represents a new class of protections that are needed to safeguard GenAI and ensure organizations are not compromising privacy and security along the way.”

Broad adoption of GenAI into business processes is contingent on enterprises finding solutions to safely adopt the technology, mitigating privacy and security threats that can result in loss of trust, legal repercussions and reputational damage. New types of threats such as prompt injections, data poisoning, and data exfiltration require a new form of protection.

Thwarting New Threats and Attack Vectors:

The conversational nature of GenAI has opened the door for brand new types of threats and attack vectors and Securiti LLM Firewalls are designed to protect against it. Internal or public facing Prompts Interfaces are a new pathway to enterprise data. Securiti LLM Firewalls detect and protect against:

Prompt injection attacks (OWASP LLM01)
Insecure output handling (OWASP LLM02)
Sensitive data disclosure (OWASP LLM06)
Training data poisoning (OWASP LLM03)
Jailbreak attacks
Offensive content and abusive language
Authentication phishing attacks and much more.

Securiti LLM Firewalls can detect and stop such attacks in-line and in real time. Combined with other capabilities within the Securiti Data+AI Command Center, they cover most aspects of the OWASP Top 10 for LLMs.

"AI will be transformative for businesses like ours, but before it can be fully embraced we need proper safeguards and controls to mitigate risks. Securiti’s new LLM firewalls along with their unique expertise in managing sensitive data at scale are critical to enabling organizations like ours to harness the power of AI,” shared Craig VanHuss, Director of IT, Infrastructure, Data, & Architecture at KVAT Food Stores Inc.

Power of Proximity and Context-Awareness:

Protecting GenAI systems & applications requires more than a traditional perimeter based firewall approach. The inspections and controls need to be embedded at various stages of the overall system. For instance, to protect retrievals from Vector DBs within a GenAI system, a retrieval firewall needs to be inserted in-line next to Vector DBs to monitor and control all retrieval attempts from it. Similarly all internal user prompts, even for internal GenAI applications, need to be monitored and secured.

“Enterprise organizations we work with are eager to take advantage of GenAI to create business value,” said Daniel Kendzior, Global Data & AI Security Practice Lead at Accenture. “Securiti’s new LLM Firewall delivers critical infrastructure to help these organizations adopt GenAI safely, mitigating privacy and security threats while accelerating innovation.”

In addition, Securiti Data Command Graph provides the necessary context for enterprise controls and data related to the GenAI systems & applications that need protection. This context enables the Securiti LLM Firewalls powerfully tuned for the GenAI use cases. Furthermore, the enterprise controls and policies used across the enterprise within Securiti Data+AI Command Center are readily made available, including:

Enterprise definition and classification of sensitive information
User Data Entitlements
Internal data policies and data controls, such as masking rules
Applicable regulations
Compliance requirements

“Our mission is to enable organizations to unleash the power of their data safely with GenAI,” said Rehan Jalil, CEO of Securiti AI. “This new category of LLM firewalls for the GenAI apps are playing a critical role in providing the security for GenAI’s mainstream use cases in the enterprise”

CDO Mag Subodh Kumar Part 3 of 3

Related Stories