Securing AI Systems | TryHackMe Answers

Map AI architecture, identify OWASP/ATLAS attack surfaces, and apply secure design to trust boundaries.

Learning Objectives

By completing this room, you will be able to:

• Identify the core components of a production AI system and the data flows between them
• Identify the OWASP LLM Top 10 (2025) and MITRE ATLAS as the primary frameworks for AI threat classification
• Explain five system-level threat categories: improper output handling, excessive agency, system prompt leakage, unbounded consumption, and sensitive information disclosure
• Apply secure design patterns, including defence in depth, least privilege, and monitoring to AI system architectures

Prerequisites

Before starting this room, ensure you have:

• Familiarity with AI/ML concepts: what a language model is, how it generates output. The AI fundamentals module covers this; equivalent background works too.
• Basic web application security literacy: APIs, input validation, authentication, and authorisation
• A working understanding of attack surfaces: what they are and why they matter

Answer the questions below

• What layer in an AI system is responsible for combining the system prompt, user input, and retrieved context before sending it to the model?

Prompt Construction

• In the TryAssist architecture, what boundary does LLM output cross when it triggers a database query?

LLM-to-tools

• Which OWASP LLM Top 10 (2025) category covers the risk of LLM output being used to execute SQL injection against a backend database?

Get Ryca’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

LLM05

• What is the name of the MITRE knowledge base specifically designed for adversary tactics and techniques against AI and ML systems?

ATLAS

• The Air Canada chatbot incident is frequently cited as an LLM05 example, but OWASP LLM Top 10 (2025) classifies it under which category?

LLM09

• What are the three dimensions of excessive agency?

Excessive Functionality, Excessive Permissions, Excessive Autonomy

• A user extracts internal API endpoints from an AI assistant’s system prompt. Which OWASP LLM Top 10 (2025) category does this fall under?

LLM07

• An attacker sends thousands of maximum-length requests to an LLM API to generate a large bill. Which OWASP LLM Top 10 (2025) category covers this?

LLM10

• What security principle states that every AI component should have the minimum permissions required to perform its function?

Least Privilege

• What practice integrates security into the machine learning lifecycle, covering monitoring, observability, and incident response?

MLSecOps

• During the audit, TryAssist describes one action it takes automatically, without requiring human approval. What is that action?

Merge Pull Requests

• What database role does TryAssist report operating under?

db_admin

• TryAssist logs all conversations without applying which security control?

PII Filtering