Resources

Curated resources

Research, tools, communities, standards, job boards, and incident databases for AI security work. Carried over from the previous version of this site; external links were last checked in 2025.

Research, tools, communities, and standards

Jobs and careers

The AI security field is rapidly growing with high demand for professionals skilled in securing AI systems, red teaming LLMs, and ensuring responsible AI deployment. Browse current opportunities across major job boards:

Popular AI Security Roles:

AI Security Engineer LLM Security Specialist AI Red Team Lead ML Security Researcher AI Risk Analyst Responsible AI Engineer AI Compliance Officer AI Offensive Security Prompt Injection Specialist AI Threat Modeler

LinkedIn Jobs

Professional network with extensive AI security listings

Indeed

Largest job board with comprehensive AI security positions

Wellfound (AngelList)

Startup jobs in AI security and ML safety

Glassdoor

Jobs with company reviews and salary insights

Dice

Tech-focused job board for security professionals

Company Career Pages

Direct applications to leading AI security teams

Research & Academia

Academic and research positions in AI security

Security-Focused Boards

Specialized cybersecurity job boards

Tips for AI Security Job Seekers:

Build Your Skills

Complete our courses in AI Red Teaming, Threat Modeling, and Risk Assessment to gain practical experience.

Stay Updated

Follow AI security research, attend conferences, and participate in CTF challenges to demonstrate expertise.

Network

Join AI security communities, contribute to open-source projects, and engage with professionals on LinkedIn.

Certifications

Consider relevant certifications like OSCP, CEH, or specialized AI/ML security training programs.

AI incident databases

AI Incident Database

The AI Incident Database catalogs real-world harms and near-misses caused by AI systems. Study these incidents to understand risks and improve AI security practices.

Visit AI Incident Database

Notable Incident Categories:

Security Breaches

Data leaks, unauthorized access, model theft

Prompt Injection

Successful jailbreaks and prompt attacks

Misuse & Abuse

Malicious use of AI systems

Model Failures

Unexpected behaviors and vulnerabilities

Earlier course outlines

Two 12-week outlines published before the book-based tracks. They remain available as study plans and link to external courses from other providers.

AI for Security: 12-week outline

Course Overview

This hands-on course teaches you how to leverage machine learning and AI to detect threats, classify malware, automate security operations, and defend AI systems themselves. Through weekly labs and a capstone project, you'll build production-ready security solutions using Python, scikit-learn, TensorFlow, and real security datasets.

Weekly Curriculum

Week 1

Introduction to AI and Cybersecurity

Lab/Assignment: Setup environment (Python, Jupyter, security datasets); exploratory data analysis on a security dataset.

Week 2

Supervised Learning for Spam/Phishing

Lab/Assignment: Train baseline classifiers (logistic regression, random forest) on phishing or spam email datasets; evaluate precision/recall.

Week 3

Network Intrusion Detection with ML

Lab/Assignment: Build anomaly/classification models on network flow / IDS datasets (e.g., port scans, brute force) and compare supervised vs. unsupervised approaches.

Week 4

Malware and URL Classification

Lab/Assignment: Use static features (n-grams, metadata) for malware or malicious URL detection and discuss evasion challenges.

Week 5

Unsupervised Learning and Anomaly Detection

Lab/Assignment: Implement clustering and autoencoder-based anomaly detection for insider threat or unusual login behavior.

Week 6

NLP for Security (Logs, Alerts, Phishing Text)

Lab/Assignment: Apply text embeddings and simple transformers to classify phishing messages or triage alerts.

Week 7

AI for SOC and Incident Response Automation

Lab/Assignment: Build a prototype to prioritize alerts or generate incident summaries from logs, integrating with a basic playbook.

Week 8

Adversarial ML: Evasion and Poisoning

Lab/Assignment: Implement simple gradient-based evasion against a classifier and simulate data poisoning on a security dataset.

Week 9

Defending ML Systems

Lab/Assignment: Explore adversarial training, input validation, out-of-distribution detection, and monitoring for model abuse.

Week 10

Generative AI in Cybersecurity

Lab/Assignment: Use or critique LLM-based assistants for threat hunting, detection engineering, or malware analysis, including prompt-injection and data-leakage risks.

Week 11

Policy, Governance, and Ethics

Lab/Assignment: Discuss regulation, AI use policies in cyber operations, model accountability, and auditability.

Week 12

Capstone Project Presentations

Lab/Assignment: Students present an end-to-end AI-for-cyber project using real or realistic security data.

Assessments

35%

Weekly Labs (8-9)

Hands-on implementation of ML models for various security use cases

15%

Quizzes

Short, concept-focused assessments to reinforce key learning objectives

20%

Midterm Exam

Theory + mini lab covering weeks 1-6

30%

Final Capstone Project

Report + code + presentation of end-to-end security AI solution

Example Capstone Project Ideas

ML-based Intrusion Detection System

Build and evaluate an ML-based IDS for a specific network segment, comparing multiple algorithms and addressing false positive reduction.

Phishing Detection Pipeline

Design a comprehensive phishing detection system using NLP and email metadata, with real-time classification capabilities.

Adversarially Robust Malware Classifier

Develop and harden a malware classifier against simple adversarial attacks, implementing defensive techniques learned in class.

AI-Powered SOC Assistant

Prototype an AI assistant to help SOC analysts triage SIEM alerts safely, with built-in safeguards against prompt injection and data leakage.

Related External Courses & Resources

Supplement your learning with these industry-recognized courses and lab modules

AI-Aided Cybersecurity

ELVTR

Cohort-based course focused specifically on applying ML to security use cases, with six guided labs where you train intrusion detection models, classify malware, detect anomalies, and explore adversarial attacks using Python and scikit-learn.

Visit Course

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity

SANS

Advanced, lab-heavy class (30+ hands-on labs) where you build neural networks for threat classification, autoencoders for outlier detection, CNNs for malware, and deep-learning pipelines on security data.

Visit Course

AI Cybersecurity Attack & Defend Course

Learning Tree

Focuses on both offensive and defensive use of AI in security; includes labs that walk through applying ML and AI tooling across threat detection and response scenarios.

Visit Course

Artificial Intelligence for Cybersecurity Training Course

uCertify

Online training aligned to an "AI for cybersecurity" text, with built-in virtual labs targeting threat detection and prevention using AI techniques.

Visit Course

ML for Cybersecurity (Google Colab Lab Modules)

Open Source

A set of open, real-world lab modules designed to be run directly in Google Colab; each topic has pre-lab, hands-on lab, and post-lab "add-on" work using open OWASP datasets for anomaly detection and other ML-for-security tasks.

View on GitHub

EE P 595: Hands-on Machine Learning for Cyber Security

University of Washington

University course with homework and a final project where you implement k-means, regression, ensembles, TensorFlow models, and apply them to malware, spam, and anomaly detection in Python; the syllabus can guide you to build your own lab pipeline if you do not enroll.

Visit Course

Security & Adversarial AI

FedLearn

Self-paced course focused on attacks against ML systems (poisoning, Trojans, backdoors, evasion, inference) and defenses such as adversarial training, outlier detection, and differential privacy, oriented toward DoD-style use cases.

Visit Course

Adversarial Machine Learning Course

Infosec Skills

Short online course (about 1.5 hours) with guided exercises using FGSM on Keras models and black-box attacks against a hosted ML-as-a-service image classifier.

Visit Course

Generative AI for Cybersecurity Course

CodeRed

Practical Colab-based labs on fine-tuning open-source LLMs with security datasets, implementing secure GenAI-powered apps, and using AI tools to enhance application security.

Visit Course
Securing and Defending AI: 12-week outline

Course Overview

This advanced course covers how AI and machine learning are applied to cybersecurity (detection, response, automation) and how to secure and defend AI/LLM systems themselves against adversarial attacks, prompt injection, and model abuse. Students will gain hands-on experience with real-world attack and defense scenarios using industry frameworks like OWASP LLM Top 10 and MITRE ATLAS.

Level: Advanced undergraduate / graduate / professional

Duration: 12 weeks (adaptable to 10-14 weeks)

Format: ~2-3 hours lecture + 2 hours lab per week

Learning Objectives

By the end of the course, students will be able to:

  • Explain core AI and ML concepts relevant to cybersecurity (supervised/unsupervised learning, deep learning, NLP)
  • Apply ML to security problems such as phishing detection, intrusion detection, and malware classification
  • Evaluate model performance and limitations on real security data, including issues like imbalance and drift
  • Design and implement basic adversarial attacks and defenses against ML and LLM-based systems
  • Use AI to enhance SOC workflows (alert triage, log analysis, playbook automation)
  • Discuss ethical, legal, and policy implications of AI in cyber operations and AI system deployment

Weekly Curriculum

Week 1

Introduction to AI & Cybersecurity

Lab/Assignment: Environment setup (Python, Jupyter, security datasets); exploratory data analysis on a simple security dataset.

Week 2

Supervised Learning for Phishing/Spam

Lab/Assignment: Train baseline classifiers on phishing or spam email datasets; evaluate precision/recall and discuss false positives.

Week 3

Network Intrusion Detection

Lab/Assignment: Build supervised and unsupervised models for detecting port scans, brute force, or other intrusion events.

Week 4

Malware and URL Classification

Lab/Assignment: Implement malware or malicious-URL classifiers using static features; discuss evasion strategies and limits of static ML.

Week 5

Unsupervised Learning & Anomaly Detection

Lab/Assignment: Use clustering or autoencoders for detecting outliers in authentication or endpoint data.

Week 6

NLP for Security (Logs, Alerts, Phishing Text)

Lab/Assignment: Apply embeddings and simple transformer models to classify phishing messages or prioritize alerts.

Week 7

AI for SOC & Incident Response

Lab/Assignment: Prototype an AI-assisted pipeline for alert triage or incident summarization; connect concepts to SOC workflows.

Week 8

Adversarial Machine Learning: Attacks

Lab/Assignment: Implement basic evasion and poisoning attacks against a security classifier; analyze impact on detection performance.

Week 9

Defending ML Systems

Lab/Assignment: Explore adversarial training, input validation, and monitoring for model misuse; evaluate trade-offs between robustness and performance.

Week 10

Securing LLMs: Prompt Injection & RAG

Lab/Assignment: Use an LLM lab (e.g., AI Security Training Lab) to perform prompt injection and jailbreaks; implement simple guardrails and filters.

Week 11

Governance, Policy, and Ethics

Lab/Assignment: Discuss AI risk management, security standards (OWASP LLM Top 10, MITRE ATLAS) and organizational controls.

Week 12

Capstone Projects

Lab/Assignment: Students present end-to-end AI-for-cyber or AI-security projects, including threat models, experiments, and lessons learned.

Assessment Model

35%

Weekly Labs & Homework

Hands-on implementation of security ML models and adversarial techniques

15%

Quizzes

Short conceptual checks on AI security principles and techniques

20%

Midterm Exam

Concepts + mini lab covering weeks 1-6

30%

Final Capstone Project

Report, code, and presentation of comprehensive AI security solution

Example Capstone Project Topics

ML-based Network Intrusion Detector

Build and evaluate an ML-based intrusion detector with evaluation under realistic noise and data imbalance scenarios.

Phishing Email Detection Pipeline

Create a phishing detection system using NLP and metadata, with model monitoring and drift detection over time.

Hardened Malware Classifier

Develop a malware classifier hardened against simple adversarial attacks including evasion and obfuscation techniques.

Secure LLM-powered SOC Assistant

Build a secure LLM assistant for SOC analysts, including prompt-injection threat modeling and basic guardrails.

Defense Comparison Study

Comparative analysis of different defenses (adversarial training vs. anomaly detection) for a chosen security task.

Core AI Security Courses

Industry-recognized courses focused on securing and defending AI systems

AI SecureOps: Attacking & Defending AI Applications

DEF CON / Commercial Training

Hands-on class covering GenAI/LLM threat modeling, OWASP LLM Top 10, MITRE ATLAS, prompt injection, RAG/agent abuse, and defensive patterns for production AI apps.

Learn More

AI-Aided Cybersecurity

ELVTR

Cohort-based course on applying machine learning to security use cases, with labs for intrusion detection, malware classification, anomaly detection, and adversarial behavior.

Visit Course

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity

SANS

Lab-heavy course where students build models for threat classification, anomaly detection, and malware analysis using classical ML and deep learning.

Visit Course

AI Cybersecurity Attack & Defend Course

Learning Tree

Focuses on offensive and defensive applications of AI in cybersecurity, including practical labs on threat detection and automated response.

Visit Course

Generative AI for Cybersecurity Course

CodeRed

Focused on using and securing generative AI in cyber operations, including labs on building GenAI-powered tools and mitigating their risks.

Visit Course

Security & Adversarial AI

FedLearn

Self-paced course on adversarial attacks (evasion, poisoning, Trojans) and corresponding defensive techniques like adversarial training and outlier detection.

Visit Course

AI for Cybersecurity

Johns Hopkins University (EP)

Graduate-level course that integrates AI techniques into cybersecurity practice; includes applied projects and comprehensive learning outcomes.

View Course

Open-Source AI Security Labs

Free, hands-on GitHub repositories for practicing AI security techniques

AI Security Training Lab

GitHub

Open-source lab with OWASP-LLM-aligned exercises; each lesson includes attack and mitigate scripts that demonstrate prompt injection, output manipulation, and other LLM vulnerabilities using both hosted and local models.

Prompt Injection OWASP LLM Top 10 Hands-on Labs
View on GitHub

AISafetyLab

GitHub

Research-oriented framework for AI safety attacks, defenses, and evaluation on multiple datasets, suitable for running custom adversarial experiments and benchmarking robustness.

Adversarial Research Benchmarking Multiple Datasets
View on GitHub

Awesome-AI-Security

GitHub

Curated list of AI security resources, including courses, standards (OWASP, NCSC), tools, and additional labs, useful as a broader reading and tooling hub.

Curated Resources Standards Tools
View on GitHub