AI Security on Code and Cypherhttps://codeandcypher.com/tags/ai-security/Enterprise cybersecurity research by Joshua A. Wortz, CISSP: Zero Trust, cloud security, DevSecOps, threat defense, and AI-security education.Code and Cypherhttps://codeandcypher.com/images/papermod-cover.pnghttps://codeandcypher.com/Hugoen-usTue, 06 Oct 2026 09:30:58 -0700Hands-On AI Security: Policy-as-Code with Open Policy Agent and Regohttps://codeandcypher.com/series/hands-on-ai-security/part-4-policy-as-code-open-policy-agent-rego/Thu, 01 Oct 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-4-policy-as-code-open-policy-agent-rego/Connect Open Policy Agent (OPA) to your AI security gateway, evaluate context classifications in real time, and generate audit-ready security block logs.Hands-On AI Security: Blue Teaming and Building the Security Gatewayhttps://codeandcypher.com/series/hands-on-ai-security/part-3-blue-teaming-building-the-security-gateway/Thu, 24 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-3-blue-teaming-building-the-security-gateway/Construct an external security gateway in Flask to inspect incoming prompts, enforce guardrails, and intercept leaked secrets before they reach the browser.Hands-On AI Security: Red Teaming Piper with 5 Prompt Injection Vectorshttps://codeandcypher.com/series/hands-on-ai-security/part-2-red-teaming-piper-prompt-injection-vectors/Thu, 17 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-2-red-teaming-piper-prompt-injection-vectors/Attack the Piper chatbot across 5 prompt injection categories, testing vulnerabilities, boundary bypasses, and hardened model variants in a local AI testbed.Hands-On AI Security: Building a Zero-Cost Local LLM Lab with Docker, Ollama, and Piperhttps://codeandcypher.com/series/hands-on-ai-security/part-1-zero-cost-local-llm-lab/Thu, 10 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/hands-on-ai-security/part-1-zero-cost-local-llm-lab/Architect a reproducible local AI red/blue team lab using Docker, Ollama, and the vulnerable Piper chatbot on standard 8GB RAM student laptops.My Teaching Philosophy: Building Accessible AI Security Educationhttps://codeandcypher.com/posts/teaching-philosophy-ai-security-overview/Sun, 30 Aug 2026 00:00:00 -0700https://codeandcypher.com/posts/teaching-philosophy-ai-security-overview/Explore an accessible teaching philosophy for AI security using Universal Design for Learning (UDL), multimodal labs, and zero-cost open educational resources.Teaching AI Security: Hands-On LLM Hardening with Docker Desktop and Security Gatewayshttps://codeandcypher.com/posts/ncyte-ai-security-webinar-llm-hardening/Sun, 30 Aug 2026 00:00:00 -0700https://codeandcypher.com/posts/ncyte-ai-security-webinar-llm-hardening/A complete guide to teaching AI security on student laptops with zero API costs using Docker, Ollama, and a Python security gateway against prompt injection.Quantum-Ready Risk Management Plan: Post-Quantum Cryptography Migration Strategyhttps://codeandcypher.com/papers/csol530-quantum-ready-risk-management-plan/Sun, 22 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-quantum-ready-risk-management-plan/Strategic risk management roadmap for transitioning enterprise cryptography to post-quantum standards before cryptanalytic breakthroughs.Automating AI Security Risk Assessment, LLM Governance, and Threat Detectionhttps://codeandcypher.com/papers/csol530-automating-ai-security-risks/Sun, 15 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-automating-ai-security-risks/Framework for identifying and mitigating AI security risks, prompt injection vectors, and automated model evaluation pipelines.Cybersecurity Governance Frameworks, Regulatory Compliance, and Maturity Auditinghttps://codeandcypher.com/papers/csol530-cybersecurity-governance-and-compliance/Wed, 04 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-cybersecurity-governance-and-compliance/Governance framework analyzing policy hierarchies, compliance mapping, and audit readiness across regulated enterprise environments.Designing Robust Security Controls for Cloud and IoT Ecosystemshttps://codeandcypher.com/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/Mon, 02 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/Security architecture blueprint specifying robust isolation controls, mutual TLS, and device attestation for cloud and IoT ecosystems.Designing a Zero Trust Strategy for Third-Party and Vendor Risk Managementhttps://codeandcypher.com/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/Mon, 26 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/Zero Trust architecture blueprint enforcing dynamic context-based access and least privilege for third-party vendors and contractors.Enterprise Risk Analysis Report: Quantitative and Qualitative Risk Assessmenthttps://codeandcypher.com/papers/csol530-creating-a-risk-analysis-report/Sat, 17 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-creating-a-risk-analysis-report/Methodology for synthesizing technical vulnerability data into executive-ready risk analysis reports with actionable remediation roadmaps.Fundamentals of Cyber Governance: Alignment, Oversight, and Policy Enactmenthttps://codeandcypher.com/papers/csol530-fundamentals-of-cyber-governance/Sun, 11 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-fundamentals-of-cyber-governance/Foundations of cybersecurity governance, board oversight, risk appetite formulation, and regulatory accountability structures.