Sebastien Deleersnyder - Breaking Bad AI: Threat Modeling as Your Secret Weapon

GenAI adoption is soaring, but preparation for its inherent security risks—such as hallucinations, bias, and data exploitation—is alarmingly low. The skills needed for offensive security against AI have dropped to just prompt engineering, putting your applications at risk of exploits like Jailbreaking and RCE. This session will reveal why classic AppSec approaches fail due to AI’s “Black Box” foundation models and introduce Threat Modeling (DICE) as the essential process for identifying novel risks and building a robust, traceable security strategy.

Sebastien (Seba) Deleersnyder, co-founder and CTO of Toreon, combines software engineering expertise with a passion for holistic product security.
After earning his Master’s in Software Engineering from the University of Ghent, with a thesis on “Hyphenation using neural networks,” he became a driving force in the security community as the founder of the Belgian OWASP chapter, a member of the OWASP Foundation Board, and co-founder of BruCON, Belgium’s annual security conference. His leadership of OWASP SAMM and his decade-long role as a highly rated Black Hat trainer have significantly impacted global software security, earning consistently outstanding feedback from participants.
Currently, Seba focuses on adapting security models for DevOps and expanding awareness of AI Threat Modeling.