From ed38e62e6fcb7d3b055c12b7626018e502e1ca70 Mon Sep 17 00:00:00 2001 From: shiva108 Date: Sat, 6 Dec 2025 20:45:16 +0100 Subject: [PATCH] docs: Standardize section numbering for ethical considerations and conclusions across chapters. --- docs/Chapter_05_Threat_Modeling_and_Risk_Analysis.md | 4 ++-- docs/Chapter_06_Scoping_an_Engagement.md | 4 ++-- docs/Chapter_07_Lab_Setup_and_Environmental_Safety.md | 4 ++-- .../Chapter_08_Evidence_Documentation_and_Chain_of_Custody.md | 4 ++-- docs/Chapter_09_LLM_Architectures_and_System_Components.md | 4 ++-- docs/Chapter_10_Tokenization_Context_and_Generation.md | 4 ++-- docs/Chapter_11_Plugins_Extensions_and_External_APIs.md | 4 ++-- ...Chapter_12_Retrieval_Augmented_Generation_RAG_Pipelines.md | 4 ++-- docs/Chapter_13_Data_Provenance_and_Supply_Chain_Security.md | 4 ++-- docs/Chapter_18_Evasion_Obfuscation_and_Adversarial_Inputs.md | 2 +- docs/Chapter_19_Training_Data_Poisoning.md | 2 +- docs/Chapter_20_Model_Theft_and_Membership_Inference.md | 2 +- docs/Chapter_21_Model_DoS_Resource_Exhaustion.md | 2 +- docs/Chapter_22_Cross_Modal_Multimodal_Attacks.md | 2 +- docs/Chapter_23_Advanced_Persistence_Chaining.md | 2 +- docs/Chapter_24_Social_Engineering_LLMs.md | 2 +- 16 files changed, 25 insertions(+), 25 deletions(-) diff --git a/docs/Chapter_05_Threat_Modeling_and_Risk_Analysis.md b/docs/Chapter_05_Threat_Modeling_and_Risk_Analysis.md index 7ff7f58..6df349f 100644 --- a/docs/Chapter_05_Threat_Modeling_and_Risk_Analysis.md +++ b/docs/Chapter_05_Threat_Modeling_and_Risk_Analysis.md @@ -123,7 +123,7 @@ A good threat model is: _With a strong threat model, your red team engagement becomes risk-driven and results-focused. The next chapter will walk you through scoping these findings into a feasible, valuable engagement plan._ -## X.Y Ethical and Legal Considerations +## 5.11 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -148,7 +148,7 @@ _With a strong threat model, your red team engagement becomes risk-driven and re --- -## X.Z Conclusion +## 5.12 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_06_Scoping_an_Engagement.md b/docs/Chapter_06_Scoping_an_Engagement.md index a9923d5..a1772b0 100644 --- a/docs/Chapter_06_Scoping_an_Engagement.md +++ b/docs/Chapter_06_Scoping_an_Engagement.md @@ -106,7 +106,7 @@ An accurately scoped engagement shows professionalism and respect for the client _With a precise scope in place, you are ready to establish the laboratory, test environments, and safety measures needed for executing a secure and efficient AI red teaming exercise. Continue to the next chapter for practical lab setup and environmental safety._ -## X.Y Ethical and Legal Considerations +## 6.9 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -131,7 +131,7 @@ _With a precise scope in place, you are ready to establish the laboratory, test --- -## X.Z Conclusion +## 6.10 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_07_Lab_Setup_and_Environmental_Safety.md b/docs/Chapter_07_Lab_Setup_and_Environmental_Safety.md index 41eee5e..ea7f3a7 100644 --- a/docs/Chapter_07_Lab_Setup_and_Environmental_Safety.md +++ b/docs/Chapter_07_Lab_Setup_and_Environmental_Safety.md @@ -93,7 +93,7 @@ Remember: _With a robust lab and clear safety controls in place, you’re prepared to gather and preserve evidence in a trustworthy manner. Continue to the next chapter to master documentation and evidence handling in AI red team engagements._ -## X.Y Ethical and Legal Considerations +## 7.8 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -118,7 +118,7 @@ _With a robust lab and clear safety controls in place, you’re prepared to gath --- -## X.Z Conclusion +## 7.9 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_08_Evidence_Documentation_and_Chain_of_Custody.md b/docs/Chapter_08_Evidence_Documentation_and_Chain_of_Custody.md index ba21e74..f9121f6 100644 --- a/docs/Chapter_08_Evidence_Documentation_and_Chain_of_Custody.md +++ b/docs/Chapter_08_Evidence_Documentation_and_Chain_of_Custody.md @@ -112,7 +112,7 @@ A robust chain of custody ensures that all evidence remains trustworthy and trac _With evidence and documentation in place, you’re equipped to deliver clear, credible findings. The next chapter will guide you through the art of writing actionable, impactful red team reports for both technical and executive audiences._ -## X.Y Ethical and Legal Considerations +## 8.10 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -137,7 +137,7 @@ _With evidence and documentation in place, you’re equipped to deliver clear, c --- -## X.Z Conclusion +## 8.11 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_09_LLM_Architectures_and_System_Components.md b/docs/Chapter_09_LLM_Architectures_and_System_Components.md index eb95ea9..b8b1226 100644 --- a/docs/Chapter_09_LLM_Architectures_and_System_Components.md +++ b/docs/Chapter_09_LLM_Architectures_and_System_Components.md @@ -137,7 +137,7 @@ Before attacking, answer these questions about your target: Understanding these components transitions you from "guessing passwords" to "engineering exploits." -## X.Y Ethical and Legal Considerations +## 9.8 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -162,7 +162,7 @@ Understanding these components transitions you from "guessing passwords" to "eng --- -## X.Z Conclusion +## 9.9 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_10_Tokenization_Context_and_Generation.md b/docs/Chapter_10_Tokenization_Context_and_Generation.md index 4a3ed59..875da3c 100644 --- a/docs/Chapter_10_Tokenization_Context_and_Generation.md +++ b/docs/Chapter_10_Tokenization_Context_and_Generation.md @@ -99,7 +99,7 @@ Before launching complex attacks, map the I/O boundaries: Understanding the "physics" of tokens and context allows you to engineer attacks that bypass higher-level safety alignment. -## X.Y Ethical and Legal Considerations +## 10.6 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -124,7 +124,7 @@ Understanding the "physics" of tokens and context allows you to engineer attacks --- -## X.Z Conclusion +## 10.7 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_11_Plugins_Extensions_and_External_APIs.md b/docs/Chapter_11_Plugins_Extensions_and_External_APIs.md index 32aee6e..c4b8624 100644 --- a/docs/Chapter_11_Plugins_Extensions_and_External_APIs.md +++ b/docs/Chapter_11_Plugins_Extensions_and_External_APIs.md @@ -110,7 +110,7 @@ The "System" that calls the tool should validate the LLM's output before executi Understanding plugins is critical because they turn a "text generator" into an "operating system" - expanding the blast radius of any successful attack. -## X.Y Ethical and Legal Considerations +## 11.7 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -135,7 +135,7 @@ Understanding plugins is critical because they turn a "text generator" into an " --- -## X.Z Conclusion +## 11.8 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_12_Retrieval_Augmented_Generation_RAG_Pipelines.md b/docs/Chapter_12_Retrieval_Augmented_Generation_RAG_Pipelines.md index 6385e2d..1fdead6 100644 --- a/docs/Chapter_12_Retrieval_Augmented_Generation_RAG_Pipelines.md +++ b/docs/Chapter_12_Retrieval_Augmented_Generation_RAG_Pipelines.md @@ -1278,7 +1278,7 @@ class RAGAccessControlTester: _RAG systems represent one of the most powerful - and vulnerable - implementations of LLM technology in enterprise environments. By understanding their architecture, attack surfaces, and testing methodologies, red teamers can help organizations build secure, production-ready AI assistants. The next chapter will explore data provenance and supply chain security - critical for understanding where your AI system's data comes from and how it can be compromised._ -## X.Y Ethical and Legal Considerations +## 12.13 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -1303,7 +1303,7 @@ _RAG systems represent one of the most powerful - and vulnerable - implementatio --- -## X.Z Conclusion +## 12.14 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_13_Data_Provenance_and_Supply_Chain_Security.md b/docs/Chapter_13_Data_Provenance_and_Supply_Chain_Security.md index af3d9e1..937ace3 100644 --- a/docs/Chapter_13_Data_Provenance_and_Supply_Chain_Security.md +++ b/docs/Chapter_13_Data_Provenance_and_Supply_Chain_Security.md @@ -1859,7 +1859,7 @@ def detect_insider_poisoning(training_data, baseline_distribution): --- -## X.Y Ethical and Legal Considerations +## 13.8 Ethical and Legal Considerations > [!IMPORTANT] > All testing activities must be conducted with proper authorization and within legal boundaries. Unauthorized testing can result in criminal prosecution. @@ -1884,7 +1884,7 @@ def detect_insider_poisoning(training_data, baseline_distribution): --- -## X.Z Conclusion +## 13.9 Conclusion **Key Takeaways:** diff --git a/docs/Chapter_18_Evasion_Obfuscation_and_Adversarial_Inputs.md b/docs/Chapter_18_Evasion_Obfuscation_and_Adversarial_Inputs.md index dcad0ab..862d24e 100644 --- a/docs/Chapter_18_Evasion_Obfuscation_and_Adversarial_Inputs.md +++ b/docs/Chapter_18_Evasion_Obfuscation_and_Adversarial_Inputs.md @@ -1075,7 +1075,7 @@ XSS: "