A workshop announcement for "Prompt Injection: Attacking and Defending AI-Powered Applications" at DEF CON 34 features a speaker's portrait in the foreground and event details against a dark background.

AppSec Village

**Context Profile for AppSec Village**

1. **Organization Mission & Cause:**
   AppSec Village is dedicated to advancing application security knowledge and practices. Their mission is to create a collaborative environment where security professionals, enthusiasts, and newcomers can learn, share, and grow. They focus on fostering a strong community around application security to enhance the overall security posture of applications and systems globally.

2. **Type of Activities:**
   - **Events:** AppSec Village organizes workshops, talks, and interactive sessions, particularly at major conferences like DEF CON.
   - **Community Programs:** They run volunteer-driven initiatives to engage and educate the community.
   - **Fundraising Campaigns:** Initiatives like the "Super Fan" campaign encourage community support through exclusive perks and merchandise.

3. **Tone of Voice:**
   The tone is friendly, engaging, and community-focused. They use an informal and enthusiastic style to connect with their audience, emphasizing inclusivity and collaboration. The language is accessible and often includes calls to action that are both inviting and motivating.

4. **Emoji Usage:**
   AppSec Village frequently uses emojis in their communications to add a playful and approachable element. Commonly used emojis include 🌞, 🔥, 🎉, 📣, 💜, and 🤗, which help convey excitement and a sense of community.

5. **Key Facts:**
   - **Founding Info:** While specific founding details are not provided, the organization is clearly established within the cybersecurity community, particularly associated with DEF CON.
   - **Scale & Impact:** They have a significant presence with multiple forms and email campaigns, indicating active engagement with their audience.
   - **Volunteer Info:** The organization is entirely volunteer-driven, highlighting the importance of community involvement in their operations.

6. **Writing Guidelines:**
   - **Style:** Use a conversational and inclusive tone. Engage the audience with direct calls to action and emphasize community involvement.
   - **Structure:** Incorporate bullet points and headings for clarity, especially when listing benefits or event details.
   - **Language:** Use simple, clear language that is accessible to both technical and non-technical audiences. Maintain a positive and encouraging tone.
   - **Emojis:** Use emojis to enhance communication, ensuring they align with the message's tone and context.

By focusing on these elements, AI-generated content can effectively align with AppSec Village's mission and communication style, fostering a stronger connection with their audience.

LXCL:Grants entry to the workshop.

Classroom Admission

LXCL:Please join the queue and as seats become available you will be granted access to the workshop.

Waitlist

Location: AppSec Village Classroom Presenter: Mohammed Ilyas Ahmed, Speaker, Author, Reviewer, Host, OWASP Contributor DescriptionPrompt injection has rapidly emerged as one of the most critical and least understood vulnerabilities in modern application security. As organizations race to integrate LLMs into customer-facing products, internal tools, and autonomous agents, attackers are already exploiting these systems in ways traditional security controls were never designed to catch. This one-day, hands-on training gives attendees a thorough, practical understanding of prompt injection &mdash; from basic chatbot manipulation to sophisticated attacks against RAG pipelines and autonomous AI agents. Using a purpose-built lab environment, attendees will exploit real vulnerabilities in LLM-powered applications, understand exactly why they work, and then build effective defenses against them. The course is structured as an attack-first, defend-second journey. By experiencing these vulnerabilities as an attacker, attendees leave with deep intuition about where AI systems. Pre-requisitesParticipants should know ahead of time <ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="text-align: start;" style="text-align: start; box-sizing: inherit;">Basic terminal/command line usage (cd, python, pip, git, docker)</li><li fr-original-style="text-align: start;" style="text-align: start; box-sizing: inherit;">Basic Python scripting concepts</li><li fr-original-style="text-align: start;" style="text-align: start; box-sizing: inherit;">HTTP/API basics (JSON requests/responses)</li><li fr-original-style="text-align: start;" style="text-align: start; box-sizing: inherit;">General application security fundamentals (especially injection concepts)</li></ul> Participants should have ready: <ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">Laptop (macOS/Linux/Windows), 8 GB RAM minimum (16 GB recommended), 20 GB free disk</li><li fr-original-style="" style="box-sizing: inherit;">Docker Desktop (or Docker Engine + Compose)</li><li fr-original-style="" style="box-sizing: inherit;">Python 3.10+ (3.11 recommended)</li><li fr-original-style="" style="box-sizing: inherit;">Git</li><li fr-original-style="" style="box-sizing: inherit;">VS Code (or equivalent IDE)</li><li fr-original-style="" style="box-sizing: inherit;">Chrome or Firefox</li><li fr-original-style="" style="box-sizing: inherit;">Reliable internet access</li><li fr-original-style="" style="box-sizing: inherit;">GitHub account for lab materials</li><li fr-original-style="" style="box-sizing: inherit;">(Optional) OpenAI or Anthropic API key; offline/local fallback labs will be available</li></ul> Pre-class validation checklist:<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">docker --version</li><li fr-original-style="" style="box-sizing: inherit;">python3 --version</li><li fr-original-style="" style="box-sizing: inherit;">git --version</li><li fr-original-style="" style="box-sizing: inherit;">Clone lab materials / unpack provided bundle</li><li fr-original-style="" style="box-sizing: inherit;">Install dependencies (pip install -r requirements.txt) or run containers (docker compose up)</li><li fr-original-style="" style="box-sizing: inherit;">Confirm health check endpoint returns {&quot;status&quot;:&quot;ok&quot;}</li></ul> Note for corporate devices: Some enterprise-managed laptops block Docker, package installation, or outbound network access. If possible, attendees should use a machine with local admin permissions and unrestricted developer tooling.<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">Basic terminal/command line usage (cd, python, pip, git, docker)&nbsp;</li><li fr-original-style="" style="box-sizing: inherit;">Basic Python scripting concepts</li><li fr-original-style="" style="box-sizing: inherit;">HTTP/API basics (JSON requests/responses)</li><li fr-original-style="" style="box-sizing: inherit;">General application security fundamentals (especially injection concepts)</li></ul>

Hi <span contenteditable="false" data-custom-variable="{{firstname}}" fr-original-class="fr-deletable styled-tag-chip" fr-original-style="" style="color: rgb(42, 42, 196); overflow-wrap: anywhere; user-select: none; background-color: rgb(248, 248, 255); border: 1px solid rgb(191, 191, 255); border-radius: 4px; margin: 0px; padding: 1px 8px; font-size: 11px; display: inline-block; box-sizing: inherit;">First name, Thank you for reserving your spot for Prompt Injection: Attacking and Defending AI-Powered Applications Workshop! We&#39;re excited to have you join us. Your tickets are booked &mdash; here&#39;s everything you need to know:📅 Date &amp; Time: Sunday, August 9, 10:15am- 1:00pm📍 Location: AppSec Village Classroom @ AppSec Village ⚠️ Please pay particular attention to the prerequisites so you come prepared and ready to get the most out of the session. We can&#39;t wait to see you there! Ailin Castellucci<a fr-original-style="" href="mailto:ailin@appsecvillage.com" rel="noopener noreferrer" style="text-decoration-color: currentcolor; user-select: auto; box-sizing: inherit;" target="_blank">ailin@appsecvillage.com</a> 💜 Love AppSec Village? If this workshop (or anything else we do) has been valuable to you, please consider becoming an <a fr-original-style="" href="https://www.zeffy.com/en-US/ticketing/appsec-village-super-fan" rel="noopener noreferrer" style="text-decoration-color: currentcolor; user-select: auto; box-sizing: inherit;" target="_blank">AppSec Village Super Fan</a>! Your support helps us keep bringing great content and events like this one to the community.&nbsp;

Location: AppSec Village Classroom Presenter: Mohammed Ilyas Ahmed, Speaker, Author, Reviewer, Host, OWASP Contributor DescriptionPrompt injection has rapidly emerged as one of the most critical and least understood vulnerabilities in modern application security. As organizations race to integrate LLMs into customer-facing products, internal tools, and autonomous agents, attackers are already exploiting these systems in ways traditional security controls were never designed to catch. This one-day, hands-on training gives attendees a thorough, practical understanding of prompt injection — from basic chatbot manipulation to sophisticated attacks against RAG pipelines and autonomous AI agents. Using a purpose-built lab environment, attendees will exploit real vulnerabilities in LLM-powered applications, understand exactly why they work, and then build effective defenses against them. The course is structured as an attack-first, defend-second journey. By experiencing these vulnerabilities as an attacker, attendees leave with deep intuition about where AI systems. Pre-requisitesParticipants should know ahead of time <ul><li>Basic terminal/command line usage (cd, python, pip, git, docker)</li><li>Basic Python scripting concepts</li><li>HTTP/API basics (JSON requests/responses)</li><li>General application security fundamentals (especially injection concepts)</li></ul> Participants should have ready: <ul><li>Laptop (macOS/Linux/Windows), 8 GB RAM minimum (16 GB recommended), 20 GB free disk</li><li>Docker Desktop (or Docker Engine + Compose)</li><li>Python 3.10+ (3.11 recommended)</li><li>Git</li><li>VS Code (or equivalent IDE)</li><li>Chrome or Firefox</li><li>Reliable internet access</li><li>GitHub account for lab materials</li><li>(Optional) OpenAI or Anthropic API key; offline/local fallback labs will be available</li></ul> Pre-class validation checklist:<ul><li>docker --version</li><li>python3 --version</li><li>git --version</li><li>Clone lab materials / unpack provided bundle</li><li>Install dependencies (pip install -r requirements.txt) or run containers (docker compose up)</li><li>Confirm health check endpoint returns {"status":"ok"}</li></ul> Note for corporate devices: Some enterprise-managed laptops block Docker, package installation, or outbound network access. If possible, attendees should use a machine with local admin permissions and unrestricted developer tooling.<ul><li>Basic terminal/command line usage (cd, python, pip, git, docker) </li><li>Basic Python scripting concepts</li><li>HTTP/API basics (JSON requests/responses)</li><li>General application security fundamentals (especially injection concepts)</li></ul>

AppSec Village

Prompt Injection: Attacking and Defending AI-Powered Applications

300 Convention Center Dr

Classroom Admission

Free

Waitlist

Free

Add a donation for AppSec Village