Sign In

John Dougherty

Principal Security Consultant | vCIO/CISO | Fullstack Developer

John Dougherty is a Principal Security Consultant at Imperva.1 He has experience in various roles related to cybersecurity and technology. Prior to his current position, John held roles at companies such as Akamai Technologies, JohnDou llc, Synoptek, and Viriton. He is based in the Denver Metropolitan Area and has over 500 connections on LinkedIn.1 John's expertise includes professional services and security consulting, as evidenced by his participation in webinars discussing topics like API security and hidden API challenges.2

Highlights

Aug 2 · linkedin

Who likes LLMs? OWASP released their top ten for LLMs and it's spot on. It's worth a thorough read/perusal, each exposure/risk is expounded on extensively. https://lnkd.in/dHDiYrCf Report (PDF): (https://lnkd.in/gxyZV2cm)

These are some fun ones:

  • LLM06: Sensitive Information Disclosure - LLM’s may inadvertently reveal confidential data in its responses, leading to unauthorized data access, privacy violations, and security breaches. It’s crucial to implement data sanitization and strict user policies to mitigate this.

  • LLM10: Model Theft - This involves unauthorized access, copying, or exfiltration of proprietary LLM models. The impact includes economic losses, compromised competitive advantage, and potential access to sensitive information.

And an excerpt from the foreward: "While our list shares DNA with vulnerability types found in other OWASP Top 10 lists, we do not simply reiterate these vulnerabilities. Instead, we delve into the unique implications these vulnerabilities have when encountered in applications utilizing LLMs." - OWASP Top Ten for LLMs (https://lnkd.in/gxyZV2cm)

#ML #mlsec #aisecurity #LLMs #NLP #ai (still ML?)

Mar 13 · linkedin

New k8s top ten out from OWASP. Worth a look, considering all the pods that are now deployed: https://lnkd.in/gAi8bzcN #k8s #devops #security #devsecops

Related Questions

What are John Dougherty's main responsibilities at Imperva?
How has John Dougherty contributed to Imperva's API security initiatives?
What is John Dougherty's background in cybersecurity?
Has John Dougherty published any notable reports or research papers?
What are some key takeaways from the sessions John Dougherty has led at Imperva?
John Dougherty
John Dougherty, photo 1
John Dougherty, photo 2
Add to my network

Location

Denver Metropolitan Area