OWASP：2025年大语言模型（LLM）应用十大安全风险洞察报告（英文版）（45页）.pdf

1、OWASP PDF v4.2.0a 20241114-202703OWASP Top 10 forLLM Applications 2025Version 2025November 18,2024LICENSE AND USAGEThis document is licensed under Creative Commons,CC BY-SA 4.0.You are free to:Share copy and redistribute the material in any medium or format for any purpose,even commercially.Adapt re

2、mix,transform,and build upon the material for any purpose,even commercially.The licensor cannot revoke these freedoms as long as you follow the license terms.Under the following terms:Attribution You must give appropriate credit,provide a link to the license,and indicate if changes were made.You may

3、 do so in any reasonable manner,but not in any way that suggests the licensor endorses you or your use.ShareAlike If you remix,transform,or build upon the material,you must distribute your contributions under the same license as the original.No additional restrictions You may not apply legal terms o

4、r technological measures that legally restrict others from doing anything the license permits.Link to full license text:https:/creativecommons.org/licenses/by-sa/4.0/legalcodeThe information provided in this document does not,and is not intended to constitutelegal advice.All information is for gener

5、al informational purposes only.This document contains links to other third-party websites.Such links are only forconvenience and OWASP does not recommend or endorse the contents of the third-partysites.REVISION HISTORY 2023-08-01 Version 1.0 Release 2023-10-16 Version 1.1 Release 2024-11-18 Version

6、2025 ReleaseTable of ContentsLetter from the Project Leads .1Whats New in the 2025 Top 10 .1Moving Forward .2LLM01:2025 Prompt Injection .3Description .3Types of Prompt Injection Vulnerabilities.3Prevention and Mitigation Strategies .4Example Attack Scenarios.5Reference Links .6Related Frameworks an