Prompt Injection: The Trust-Boundary Bug in LLM Applications
How direct and indirect prompt injection cross trust boundaries, and how to limit what a manipulated model can expose or do.
Read essay Security work, written down.
I'm Sudhir, a CISSP-certified Cyber Security Professional
working on enterprise security, governance, compliance, and validation. I write practical
notes on how security controls are designed, assessed, operated, and evidenced in large
enterprise environments.
Security architecture Essay
Why Theoretical Security Fails in Production
How to choose security controls that reduce risk without driving users toward workarounds.
Security Architecture: Principles for Designing Secure Systems and Networks
How defense in depth, identity, segmentation, threat modeling, and recovery fit into a security architecture.
Read essayMore from the writing
All 12 postsFirewall Chaos: Automated Policy Management
View the slidesBrowse by topic
Choose a subject to see the related writing.
- Security architecture Layering, blast radius, and designing for the exception. 5 posts
- Network security Firewall policy, segmentation, and hardening at scale. 6 posts
- Compliance Controls people actually follow, and audits you can live with. 1 post
- Vulnerability management Triage, prioritisation, and reading a report like an attacker. 1 post
- Offense CTFs, red teaming, and offensive security. 2 posts
- AI security Prompt injection, model risk, and securing LLM systems. 2 posts
- Certification Exam preparation, study notes, and what the paper is worth. 1 post
I'm a Cyber Security Professional. I write about how security decisions play out in practice. More about me ↗