AI Security — Attacks and Defenses
Two intensive days to understand, reproduce and counter attacks on AI models — both CNNs and LLMs — in industrial and adversarial settings.
2 days · 16×45min · isolated labs
- Duration
- 2 days (16×45min)
- Audience
- ML / security engineers
- Price
- CHF 3,800/person or 24,000 team
- Format
- Lectures + flipped + labs
Who it's for
- ML / MLOps engineers shipping models to production
- Data scientists facing adversarial environments
- Technical security teams auditing AI systems
- Architects integrating AI into sensitive products
Learning objectives
- Identify and assess AI risks on CNNs and LLMs in industrial and adversarial settings
- Understand and reproduce adversarial examples, data poisoning, backdoors, LLM jailbreaks (white-box and black-box)
- Apply explainability techniques to audit and challenge AI decisions
Prerequisites
Fluent Python, machine learning fundamentals, understanding of neural networks (CNN, transformer). Labs assume the ability to read and modify code.
Teaching format
A combination of technical lectures, flipped classroom (prepared upstream then presented in groups) and hands-on labs in a provided isolated environment.
| Format | Duration |
|---|---|
| Lectures | 8×45 min |
| Flipped classroom | 4×45 min |
| Hands-on labs | 4×45 min |
Course content
-
AI Risks
Adversarial robustness, ML supply chain, dual-use, threat scenarios.
-
Attacks
FGSM / PGD, data poisoning, backdoors, automated LLM jailbreaks.
-
Transparency & Explainability
Interpreting decisions, auditing tools, flipped classroom in groups.
Indicative schedule
Day 1 — Foundations & Attacks
- 09:00–09:45 Introduction — AI Risks Landscape lecture
- 09:45–10:30 Attacks Overview — Taxonomy & Threat Models lecture
- 10:30–10:45 Break
- 10:45–11:30 Adversarial Examples — FGSM & PGD lecture
- 11:30–12:15 Data Poisoning & Backdoor Attacks lecture
- 12:15–13:15 Lunch
- 13:15–14:45 Lab 1 — Attacking an Image Classifier lab
- 14:45–15:00 Break
- 15:00–15:45 LLM Security & Jailbreaking Techniques lecture
- 15:45–16:30 Threat Scenarios & Defensive Mindset lecture
Day 2 — Defenses, Explainability & Peer Teaching
- 09:00–09:45 Transparency & Explainability — Concepts lecture
- 09:45–10:30 Interpreting Model Decisions in Practice lecture
- 10:30–10:45 Break
- 10:45–12:15 Lab 2 — LLM Jailbreaking (black-box & white-box) lab
- 12:15–13:15 Lunch
- 13:15–14:00 Lab 3 — Explainability Tooling & Model Auditing lab
- 14:00–14:45 Flipped Classroom — Groups 1 & 2 flipped
- 14:45–15:00 Break
- 15:00–15:45 Flipped Classroom — Groups 3 & 4 flipped
- 15:45–16:30 Synthesis, Q&A & Closing Discussion lecture
Instructors
- Denis Rosset
Cybersecurity Expert — Lead instructor
- Nicolas Maier
AI & Algorithms Expert
- Michael Ramos da Silva
Cloud & DevOps Expert
Pricing & logistics
- CHF 3,800/person
- CHF 24,000 team package (up to 8 participants)
- Language: English or French
- Location: on-site client or remote, lab environment provided
References
- AI Safety & Security (HEIA-FR), course taught by Denis Rosset
- CS120 Stanford — Introduction to AI Safety, Ethics, and Society
- BlueDot AI Safety Fundamentals (AISF)
Organize this training
Adaptation possible to your internal stacks (in-house models, MLOps tooling) and your threat scenarios.
Request this training — AI Security — Attacks and Defenses
Tell us what your team needs. Reply within 24h.