Hack the model: Build AI security skills with the GitHub Secure Code Game
Blog post from GitHub
Season three of the GitHub Secure Code Game introduces players to the security challenges posed by artificial intelligence, offering a hands-on learning experience through six progressive challenges. This free course, suitable for developers of all levels, gamifies the process of identifying and fixing vulnerabilities within code, with a focus on defensive techniques such as crafting robust system prompts, output validation, input filtering, and LLM self-verification. Utilizing Codespaces for a quick setup, players engage in exercises that simulate real-world threats by crafting malicious prompts and then securing applications against them. The game, which began in March 2023, has garnered participation from over 10,000 developers across various sectors, emphasizing the importance of security in software development. Season three, developed in collaboration with Bartosz Gałek and inspired by his HackMerlin game, utilizes GitHub Models to provide a realistic and user-friendly experience, allowing players to explore AI model differences while adhering to default safeguards. The initiative highlights a community-driven approach where contributors can suggest new challenges for future seasons, aiming to continually enhance the learning journey for developers.