Back close

Course Detail

Course Name Security in AI
Course Code 26CY755
Program M. Tech. in Cyber Security
Credits 3

Syllabus

Foundations of Generative AI and Secure AI Systems: Introduction to Generative AI, Foundation Models, Transformer Architecture, Self-Attention Mechanism, Embeddings and Vector Representations, Large Language Models (LLMs), Prompt Engineering, Fine-Tuning Techniques, Parameter-Efficient Fine-Tuning (PEFT), LoRA, Retrieval-Augmented Generation (RAG), Vector Databases, AI Agents and Autonomous Systems, Internet of Agents, Model Context Protocol (MCP), Secure AI Development Lifecycle, Model Hardening, Identity, Traceability and Secure Communication for AI Agents, Applications of Generative AI in Cyber Security.

AI Security and Trustworthy AI: AI Threat Landscape, AI Attack Surface, Security, Privacy and Trustworthiness in AI, AI Risk Management, Threat Modelling for AI Systems, Adversarial Machine Learning, Responsible AI, AI Governance and Ethics, Robust Machine Learning, Adversarial Training, Defensive Techniques, Secure Data Pipelines, Privacy-Preserving Machine Learning, Differential Privacy, Federated Learning Security, Secure Multi-Party Computation, Homomorphic Encryption, Explainable AI, Adversarial Attacks, Privacy Attacks, Model Extraction and Inference Attacks, MITRE ATLAS Framework, AI Supply Chain Security, Model Fingerprinting, Machine Unlearning, Model Provenance and Lineage, AI Bill of Materials (AI-BoM), Security of Deep Learning Models, AI Assurance and Case Studies in AI Security.

Security of Foundation Models and Large Language Models: Foundation Model Security, Large Language Model Security, Prompt Injection, Jailbreaking, Prompt Leakage, Hallucinations, Data Leakage, Model Theft, Security of Fine-Tuning, Security of Retrieval-Augmented Generation (RAG), Security of AI Agents and Autonomous Systems, Offensive AI for Security Evaluation, AI Hardening and Defensive Prompting, Input Validation, Output Guardrails, AI-assisted Security Operations, AI Security Frameworks and Standards, Secure AI Framework (SAIF), ISO/IEC 42001, NIST AI Risk Management Framework, EU AI Act, AI Compliance and Governance.

Objectives and Outcomes

Prerequisites: 26CY731 – AI for Cyber Security Applications

Course Outcome

Course Outcome(CO) Bloom’s Taxonomy Level
CO1 Explain the fundamental concepts of Generative AI, foundation models, Large Language Models (LLMs), and secure AI systems. L3
CO2 Analyze security, privacy, trustworthiness, and adversarial threats in AI systems using appropriate AI security principles and techniques. L4
CO3 Apply AI security frameworks, defensive techniques, and governance practices to develop and evaluate secure, trustworthy AI applications L4

CO-PO Mapping

CO-PO Mapping (3-High, 2-Medium, 1-Low)

CO/PO PO 1 PO 2 PO 3 PO 4 PO 5 PO 6 PO 7 PO 8 PO 9 PO 10 PSO1 PSO2 PSO3
CO 1 2 3 3 3 2 2 3 1
CO 2 3 2 2 2 3 2 2 2 3 2
CO 3 3 3 3 3 3 2 1 2 2 3 3 3

Text Book / References

Text Books

  1. Ian Goodfellow, Yoshua Bengio and Aaron Courville, Deep Learning, MIT Press, 2016.
  2. Christopher M. Bishop and Hugh Bishop, Deep Learning: Foundations and Concepts, Springer, 2024.
  3. Yevgeniy Vorobeychik and Murat Kantarcioglu, Adversarial Machine Learning, Morgan & Claypool Publishers, 2018.
  4. Chip Huyen, AI Engineering: Building Applications with Foundation Models, O’Reilly Media, 2025.
  5. Battista Biggio and Fabio Roli, Adversarial Machine Learning, Springer.

References

  1. NIST, Artificial Intelligence Risk Management Framework (AI RMF 1.0), National Institute of Standards and Technology, 2023.
  2. OWASP Foundation, OWASP Top 10 for Large Language Model Applications.
  3. Jay Alammar and Maarten Grootendorst, Hands-On Large Language Models, O’Reilly Media, 2024.
  4. Nicolas Papernot et al., Practical Black-Box Attacks Against Machine Learning, ACM AsiaCCS.
  5. OpenAI, Anthropic, Google DeepMind and Meta AI Technical Reports on Foundation Model and LLM Security.
  6. MITRE, MITRE ATLAS – Adversarial Threat Landscape for AI Systems.
  7. ISO/IEC 42001:2023, AI Management System.
  8. Google, Secure AI Framework (SAIF).

DISCLAIMER: The appearance of external links on this web site does not constitute endorsement by the School of Biotechnology/Amrita Vishwa Vidyapeetham or the information, products or services contained therein. For other than authorized activities, the Amrita Vishwa Vidyapeetham does not exercise any editorial control over the information you may find at these locations. These links are provided consistent with the stated purpose of this web site.

Admissions Apply Now