Hello World Dev Conference
      • Sharing URL Link copied
      • /edit
      • View mode
        • Edit mode
        • View mode
        • Book mode
        • Slide mode
        Edit mode View mode Book mode Slide mode
      • Customize slides
      • Note Permission
      • Read
        • Owners
        • Signed-in users
        • Everyone
        Owners Signed-in users Everyone
      • Write
        • Owners
        • Signed-in users
        • Everyone
        Owners Signed-in users Everyone
      • Engagement control Commenting, Suggest edit, Emoji Reply
    • Invite by email
      Invitee

      This note has no invitees

    • Publish Note

      Share your work with the world Congratulations! 🎉 Your note is out in the world Publish Note

      Your note will be visible on your profile and discoverable by anyone.
      Your note is now live.
      This note is visible on your profile and discoverable online.
      Everyone on the web can find and read all notes of this public team.
      See published notes
      Unpublish note
      Please check the box to agree to the Community Guidelines.
      View profile
    • Commenting
      Permission
      Disabled Forbidden Owners Signed-in users Everyone
    • Enable
    • Permission
      • Forbidden
      • Owners
      • Signed-in users
      • Everyone
    • Suggest edit
      Permission
      Disabled Forbidden Owners Signed-in users Everyone
    • Enable
    • Permission
      • Forbidden
      • Owners
      • Signed-in users
    • Emoji Reply
    • Enable
    • Versions and GitHub Sync
    • Note settings
    • Note Insights New
    • Engagement control
    • Make a copy
    • Transfer ownership
    • Delete this note
    • Insert from template
    • Import from
      • Dropbox
      • Google Drive
      • Gist
      • Clipboard
    • Export to
      • Dropbox
      • Google Drive
      • Gist
    • Download
      • Markdown
      • HTML
      • Raw HTML
Menu Note settings Note Insights Versions and GitHub Sync Sharing URL Help
Menu
Options
Engagement control Make a copy Transfer ownership Delete this note
Import from
Dropbox Google Drive Gist Clipboard
Export to
Dropbox Google Drive Gist
Download
Markdown HTML Raw HTML
Back
Sharing URL Link copied
/edit
View mode
  • Edit mode
  • View mode
  • Book mode
  • Slide mode
Edit mode View mode Book mode Slide mode
Customize slides
Note Permission
Read
Owners
  • Owners
  • Signed-in users
  • Everyone
Owners Signed-in users Everyone
Write
Owners
  • Owners
  • Signed-in users
  • Everyone
Owners Signed-in users Everyone
Engagement control Commenting, Suggest edit, Emoji Reply
  • Invite by email
    Invitee

    This note has no invitees

  • Publish Note

    Share your work with the world Congratulations! 🎉 Your note is out in the world Publish Note

    Your note will be visible on your profile and discoverable by anyone.
    Your note is now live.
    This note is visible on your profile and discoverable online.
    Everyone on the web can find and read all notes of this public team.
    See published notes
    Unpublish note
    Please check the box to agree to the Community Guidelines.
    View profile
    Engagement control
    Commenting
    Permission
    Disabled Forbidden Owners Signed-in users Everyone
    Enable
    Permission
    • Forbidden
    • Owners
    • Signed-in users
    • Everyone
    Suggest edit
    Permission
    Disabled Forbidden Owners Signed-in users Everyone
    Enable
    Permission
    • Forbidden
    • Owners
    • Signed-in users
    Emoji Reply
    Enable
    Import from Dropbox Google Drive Gist Clipboard
       Owned this note    Owned this note      
    Published Linked with GitHub
    • Any changes
      Be notified of any changes
    • Mention me
      Be notified of mention me
    • Unsubscribe
    --- GA: UA-34467841-15 --- # 玉山銀行Gen AI SafeGuards安全防護架構與實踐 - 楊益昌(Johnson) ###### tags: `HelloWorld2025` `HWDC2025` `2025` `DE 會議室` `AI 驅動的軟體開發資安新思維` <blockquote> 隨著生成式 AI(GenAI)的快速發展,在金融業也開始積極導入GenAI在各個產品與應用,玉山銀行在這部分也積極投入,而在GenAI導入後,其隨後的安全防護與架構也隨之需要建立,涵蓋從地端的個資保護、顧客輸入的Prompt過濾、及雲端LLM模型回覆的保護,並將其模組化建立後讓其各產品可以立即串接與保護。在這場演講中,將分享玉山銀行在導入生成式 AI(GenAI)安全防護的實戰經驗與架構設計思維,內容涵蓋從理論到實作的完整流程,藉此應對在導入 GenAI 技術時,能夠兼顧創新與安全防護。 🛡️ 背景與動機 與Google GenAI合作案中,探討其在GenAI可能面臨的攻擊與挑戰。包括 Prompt Injection、資料洩漏、模型濫用、回覆非業務相關等問題,並介紹如何建立一套完整的風險辨識與防護思維。 🛡️ GenAI安全防護SafeGuards 架構設計 介紹我們在玉山銀行所設計的 SafeGuards 架構,這是一套針對 GenAI 應用所打造的安全防護機制,涵蓋輸入驗證、回應過濾、角色權限控管、Prompting Protection客製化防禦等模組,確保 AI 回應符合金融業合規與資安要求。 🛡️實戰 Guardrails 攻擊防護實測 導入 Guardrails 技術時的實測結果,包含如何模擬攻擊場景、驗證防護效果,以及如何透過策略設定與模型微調,有效阻擋 Prompt Injection、越權存取等攻擊手法。 🛡️第三方檢驗 為了確保架構的客觀性與安全性,我們也導入第三方資安檢測機制,包含紅隊演練與模型行為測試,並分享在這些檢驗過程中所獲得的洞察與改進方向。 🛡️成效與未來展望 模型優化與穩定性下一階段的防禦功能與服務擴展 這場演講適合對 GenAI 技術導入、資安防護、雲端架構與實務操作有興趣的技術人員、架構師與資安專家。希望透過這次分享,能夠提供大家在導入 GenAI 技術時更全面的安全思維與實戰參考。 聽眾收穫: 當聽眾參與這場演講後,將能夠獲得以下幾項實質收穫: 🔐 建立 GenAI 安全防護的完整觀念 聽眾將深入了解生成式 AI 在企業應用中可能面臨的安全風險,並掌握如何從理論層面建構一套有效的防護思維,為日後導入 GenAI 技術奠定穩固的資安基礎。 🧩 掌握 SafeGuards 架構設計與實作細節         透過實際案例與架構解析,聽眾將學會如何設計一套可落地的 GenAI 安全防護機制,涵蓋輸入驗證、回應過濾、權限控管等模組,並了解各模組在實務中的應用方式。 🛡️ 交流 Guardrails 攻擊防護 </blockquote> {%hackmd @HWDC/announcement-2025 %} ## 會議資訊 **時間:** 16:45 ~ 17:30 **地點:** DE 會議室 **日期:** 2025年10月14日 **語言:** 中文 **難度:** 中階 **相關連結:** - [Hello World Dev Conference 2025 官方網站](https://hwdc.ithome.com.tw/2025) [target=_blank] - [Hello World 2025 議程表](https://hwdc.ithome.com.tw/2025/agenda) [target=_blank] ## 筆記區 > 請從這裡開始記錄你的筆記 ### LLM面臨的問題 - 出現幻覺 - 執行惡意攻擊的程式碼 ### 安全機制的挑戰 - 對不同語言的支援程度不同 玉山銀行2個GenAI產品 投資 i chat AI房貸顧問 Prompt Protection Instruction Sample * 使用Markdown結構化格式(Best Practice) * 隔離指令: 將「安全與完整性檢查 (步驟一)」提升到最高優先級。 * 負面提示:阻止攻擊者透過要求模型解釋其行為,來洩露系統規則 * 列表服務限制,避免超出產品主題之問題回覆。 * 強制文案:使用拒答文案作為唯一回應,避免LLM Model自行解釋。 * 提供多個輸入/輸出的範例,確保其回應的語氣、格式上保持高度一致性。 【主區塊】 ## 1.核心身分 ## 2.回覆協議(嚴格遵守) ## 3.知識領域與限制 ## 4.拒答文案 ## 5.關鍵範例 --- ## 討論區 > 歡迎在此進行討論與 Q&A ## 相關資源 - 投影片連結:(待講者提供) - 相關文件:(待更新)

    Import from clipboard

    Paste your markdown or webpage here...

    Advanced permission required

    Your current role can only read. Ask the system administrator to acquire write and comment permission.

    This team is disabled

    Sorry, this team is disabled. You can't edit this note.

    This note is locked

    Sorry, only owner can edit this note.

    Reach the limit

    Sorry, you've reached the max length this note can be.
    Please reduce the content or divide it to more notes, thank you!

    Import from Gist

    Import from Snippet

    or

    Export to Snippet

    Are you sure?

    Do you really want to delete this note?
    All users will lose their connection.

    Create a note from template

    Create a note from template

    Oops...
    This template has been removed or transferred.
    Upgrade
    All
    • All
    • Team
    No template.

    Create a template

    Upgrade

    Delete template

    Do you really want to delete this template?
    Turn this template into a regular note and keep its content, versions, and comments.

    This page need refresh

    You have an incompatible client version.
    Refresh to update.
    New version available!
    See releases notes here
    Refresh to enjoy new features.
    Your user state has changed.
    Refresh to load new user state.

    Sign in

    Forgot password

    or

    By clicking below, you agree to our terms of service.

    Sign in via Facebook Sign in via Twitter Sign in via GitHub Sign in via Dropbox Sign in with Wallet
    Wallet ( )
    Connect another wallet

    New to HackMD? Sign up

    Help

    • English
    • 中文
    • Français
    • Deutsch
    • 日本語
    • Español
    • Català
    • Ελληνικά
    • Português
    • italiano
    • Türkçe
    • Русский
    • Nederlands
    • hrvatski jezik
    • język polski
    • Українська
    • हिन्दी
    • svenska
    • Esperanto
    • dansk

    Documents

    Help & Tutorial

    How to use Book mode

    Slide Example

    API Docs

    Edit in VSCode

    Install browser extension

    Contacts

    Feedback

    Discord

    Send us email

    Resources

    Releases

    Pricing

    Blog

    Policy

    Terms

    Privacy

    Cheatsheet

    Syntax Example Reference
    # Header Header 基本排版
    - Unordered List
    • Unordered List
    1. Ordered List
    1. Ordered List
    - [ ] Todo List
    • Todo List
    > Blockquote
    Blockquote
    **Bold font** Bold font
    *Italics font* Italics font
    ~~Strikethrough~~ Strikethrough
    19^th^ 19th
    H~2~O H2O
    ++Inserted text++ Inserted text
    ==Marked text== Marked text
    [link text](https:// "title") Link
    ![image alt](https:// "title") Image
    `Code` Code 在筆記中貼入程式碼
    ```javascript
    var i = 0;
    ```
    var i = 0;
    :smile: :smile: Emoji list
    {%youtube youtube_id %} Externals
    $L^aT_eX$ LaTeX
    :::info
    This is a alert area.
    :::

    This is a alert area.

    Versions and GitHub Sync
    Get Full History Access

    • Edit version name
    • Delete

    revision author avatar     named on  

    More Less

    Note content is identical to the latest version.
    Compare
      Choose a version
      No search result
      Version not found
    Sign in to link this note to GitHub
    Learn more
    This note is not linked with GitHub
     

    Feedback

    Submission failed, please try again

    Thanks for your support.

    On a scale of 0-10, how likely is it that you would recommend HackMD to your friends, family or business associates?

    Please give us some advice and help us improve HackMD.

     

    Thanks for your feedback

    Remove version name

    Do you want to remove this version name and description?

    Transfer ownership

    Transfer to
      Warning: is a public team. If you transfer note to this team, everyone on the web can find and read this note.

        Link with GitHub

        Please authorize HackMD on GitHub
        • Please sign in to GitHub and install the HackMD app on your GitHub repo.
        • HackMD links with GitHub through a GitHub App. You can choose which repo to install our App.
        Learn more  Sign in to GitHub

        Push the note to GitHub Push to GitHub Pull a file from GitHub

          Authorize again
         

        Choose which file to push to

        Select repo
        Refresh Authorize more repos
        Select branch
        Select file
        Select branch
        Choose version(s) to push
        • Save a new version and push
        • Choose from existing versions
        Include title and tags
        Available push count

        Pull from GitHub

         
        File from GitHub
        File from HackMD

        GitHub Link Settings

        File linked

        Linked by
        File path
        Last synced branch
        Available push count

        Danger Zone

        Unlink
        You will no longer receive notification when GitHub file changes after unlink.

        Syncing

        Push failed

        Push successfully