About this ebook
The book places AI security within established industry and academic frameworks, including <b>OWASP</b>, <b>MITRE ATLAS</b>, and the <b>NIST AI Risk Management Framework</b>. These frameworks provide a shared vocabulary and methodological foundation for evaluating AI-driven applications, helping readers understand the broader landscape of risks, controls, and defensive strategies.
A central focus of the text is practical model-level testing. Readers learn how to evaluate AI systems using tools such as <b>Garak</b>, <b>Promptfoo</b>, and <b>PyRIT</b>, gaining hands-on experience with prompt-injection testing, adversarial probing, and structured model evaluation. These methods emphasize empirical testing and reproducible workflows, making AI security accessible even to practitioners without a machine-learning background.
The book also explores how AI can enhance offensive security workflows. With the rise of local LLMs and <b>MCP-powered automation</b>, penetration testers can integrate AI into reconnaissance, analysis, and operational tasks while maintaining full control over sensitive data. Examples using <b>Gemini-CLI</b>, <b>Hexstrike-AI</b>, and <b>Kali-MCP-Server</b> demonstrate how AI-assisted pentesting can accelerate work and improve efficiency.
To support long-term skill development, the final chapters guide readers through building their own AI-assisted pentesting tools using Python and MCP servers. This emphasis on tool creation encourages innovation and prepares professionals to adapt as AI technologies continue to evolve.
<b><i>Foundations of AI Security</i></b> offers a rigorous yet practical pathway into AI security, combining conceptual clarity with actionable techniques. It is an essential resource for anyone seeking to understand, evaluate, and secure modern AI-enabled systems.
Discover more
About the author
<b><i>Daniel W. Dieterle</i></b> has worked in the IT field for over 25 years, supporting and securing systems across a wide range of industries. His experience includes providing system and network support for hundreds of companies throughout New York and Pennsylvania, working in a Fortune 500 corporate data center, and serving in an Ivy League university’s computer support department. He has also held executive roles in an electrical engineering firm and served on the board of directors for a non‑profit corporation.
For the last 15 years, <b><u>Dieterle has been fully dedicated to computer security</u></b> as a researcher, consultant, and author. He has collaborated with multiple publishing companies, assisting instructors and fellow authors in developing and reviewing security training courses, technical books, and professional articles. His work has been featured in international computer magazines and referenced by both technical organizations and media outlets.
Dieterle has spoken at several international security conferences, and his offensive‑security‑focused books are used worldwide as teaching and training resources by universities, technical training centers, government agencies, and private‑sector organizations. He is passionate about helping newcomers enter the cybersecurity field and continues to contribute to the global security community through writing, research, and mentorship.
