Hiding in Plain Sight: Prompt Injection Attacks Are a New AI Threat

Artificial intelligence is a massive productivity driver for every business category, including for law firms. 

 

Of course, as with any new technology, AI does not come without risks. 

 

That doesn’t mean that you shouldn’t use AI in your law practice.  As an attorney, your obligation is not to eliminate risk, but to take reasonable precautions against it.  The first step in that process is understanding which credible threats exist around the use of AI. 

 

Unfortunately, there is a new one you should be aware of: prompt injection attacks. 



Prompt injections are, in essence, commands hidden in AI data inputs.  The AI tool will follow embedded commands, as well as direct user inputs, because it does not effectively differentiate between the two. 

 

Now, users can inject prompts on their own – some do so to try to ‘jailbreak’ AI products – but, what business owners are more concerned about would be prompt injection attacks (including where the prompt is hidden in external data); although, it is possible that your own employees could attempt prompt injection for nefarious purposes. 

 

This is a multifaceted issue, with lots of layers; and, governance around this problem is still being formulated – but, you can read an excellent summary of what this all means, as well as suggestions on prevention, at this robust article. 

 

. . . 

 

If you want to talk further about AI governance in your law practice, just reach out!

Through a unique partnership between the Maine Board of Overseers of the Bar and Jared Correia’s Red Cave Law Firm Consulting, Maine attorneys have access to experienced law practice management consultants at a special discounted rate. 

To get started, visit Red Cave’s landing page for Maine attorneys, and start running your law practice like a business.

Comments

Popular posts from this blog

Perfect Timing: New Calendaring Tools Make It Easy to Connect with Leads and Clients

Get That Bag: How to Build a Collection Process for Your Law Firm

The Difference: The Demands of Content Marketing Require Creativity