Good general overview of LLM security. Has a good approach of viewing security in terms of a software supply chain, which then allows a generalization of supply chain risks to the software domain. General, but it is a "playbook" as the title says.
“LLM Application Security” is a serious attempt to organize the risks, threats, and protection methods for systems that use large language models (LLMs). The author takes on a tough job-explaining a fast-changing and still quite new field-in a step-by-step, example-based way, with a strong focus on real-world practice.
What I liked most were the many clear examples that make it easier to understand how attacks work and how to prevent them. The writing style reminded me of Adam Shostack’s famous book on threat modeling - both authors break things down clearly, using real cases to explain each type of threat. This is a big strength of the book.
The book doesn’t try to be trendy- it’s reliable and practical. It feels more like a solid training guide than a popular science book. But thanks to all the examples, it’s not boring. It feels like a smart colleague explaining a threat to you on a whiteboard, then showing you two real-life cases and a counterexample to help you understand the limits.
Many rules of thumb for secure development and deployment of Large Language Models based on common sense, as well as some rules inferred from non-AI computer security. Maybe this is one of the first books of its kind?