PART 4Prevention
Slides 18–25 · 6 mitigation categories
Slide 18 · Prevention Overview
OWASP groups sensitive info disclosure defenses into 6 categories.
Twelve specific techniques, two per category.
🧹
Sanitization
Clean data before it ever reaches training or the model.
🔐
Access Controls
Least privilege, restricted data sources.
🔒
Federated Learning & Privacy Techniques
Federated learning, differential privacy.
📢
User Education & Transparency
Teach safe use, disclose data policy.
⚙️
Secure System Configuration
Protect the system prompt, fix misconfigurations.
🧮
Advanced Techniques
Homomorphic encryption, tokenization & redaction.
We'll take them in this order, two techniques at a time per category — the way OWASP documents them.