Unit 09 · Teaching plan
Participants learn to treat everyday generative and agentic AI security as a control problem in human-AI collaboration. The Friday should use current OWASP guidance as a reference map while making visible how untrusted office content, retrieved sources, sensitive information, guardrail limitations, tool permissions, validation, approval, and human reliance shape whether a workflow remains controllable. Prompt injection, retrieval/source poisoning, layered safeguards, and agentic control are experiential; training-data poisoning, model backdoors, model inversion, membership inference, and specialist embedding attacks remain awareness topics.
System literacyData literacyHuman-Context literacyInteraction literacyLevel 5: Orchestration with security-aware controlEveryday generative and agentic AI security: trust boundaries, injection, poisoned sources, sensitive information, least agency, and residual risk