ai bot, ai chat, ai chatbot, best chatbot, botium, chatbot, chatbot ai, chatbot app, chatbot online, chatbot website, chatbots, conversation with ai, creating chatbots, robot chat, security, testing
Security Threats and Security Testing for Chatbots | by Florian Treml
This article is pointing out security threats and attack vectors of typical chatbot architectures — based on OWASP Top 10 and adversarial attacks.The well-known OWASP Top 10 is a list of top security threats for a web application. Most chatbots out there are available over a public web frontend, and as such all the OWASP security risks apply to those chatbot frontends as well. Out of these risks there are two especially important to defend against, as in contrary to the other risks, those two are nearly always a serious threat when talking about chatbots — XSS and SQL Injection.Recently another kind of security threat came up, specifically targeting NLP models — so-called “adversarial attacks”.A typical implementation of a chatbot frontend:There is a chat window with an input boxEveryth...
