Hands-On AI Security: Policy-as-Code with Open Policy Agent and Rego
How to move beyond static regex filters by using Open Policy Agent (OPA) and Rego to enforce declarative, explainable security policies on AI prompts.
AI Security
Hands-On AI Security: Blue Teaming and Building the Security Gateway
How to decouple AI defense from the model by building a Python Flask security proxy with hot-reloading ingress filters and egress data masking.
Hands-On AI Security: Red Teaming Piper with 5 Prompt Injection Vectors
How to probe and break local LLMs using Direct Injection, Roleplay, Obfuscation, and Authority Claims, demonstrating why system instructions fail as security boundaries.
Hands-On AI Security: Building a Zero-Cost Local LLM Lab with Docker, Ollama, and Piper
How to build a 100% free, local AI security sandbox using Docker Desktop, Ollama (llama3.2), and a custom vulnerable chatbot to test prompt injection defenses without cloud API costs.
My Teaching Philosophy: Building Accessible AI Security Education
As the father of a college student with autism, my approach to inclusive teaching is both professionally grounded and deeply personal. I see firsthand how traditional, single-mode instructional methods can create unintentional barriers for neurodivergent learners or students balancing non-traditional paths. To foster an environment where every student can succeed regardless of their starting point or learning style, I focus on building multimodal, accessible, and low-cost learning environments across three key areas. ...
Teaching AI Security: Hands-On LLM Hardening with Docker Desktop and Security Gateways
In August 2026 I delivered a webinar for the NCyTE Center on a question I kept hearing from community college faculty: how do you teach AI security when you don’t have a budget, your IT department locks down what you can install, and API costs for a live LLM are unpredictable? The answer I built — and the one this post walks through — is a zero-cost, fully local lab that any instructor can drop into their course next week. ...
Quantum-Ready Risk Management Plan: Post-Quantum Cryptography Migration Strategy
Quantum computing promises revolutionary capabilities in processing power by harnessing the principles of quantum mechanics, such as superposition and entanglement. While these innovations could fuel scientific breakthro…
Automating AI Security Risk Assessment, LLM Governance, and Threat Detection
Artificial intelligence (AI) is transforming the way organizations approach cybersecurity. With its ability to sift through massive amounts of data and identify unusual behavior in real time, AI can help security teams s…
Cybersecurity Governance Frameworks, Regulatory Compliance, and Maturity Auditing
In the rapidly evolving healthcare landscape, cybersecurity governance plays a pivotal role in safeguarding sensitive patient information while supporting operational efficiency and regulatory compliance. As healthcare o…
Designing Robust Security Controls for Cloud and IoT Ecosystems
The growing adoption of cloud services and IoT devices has transformed the way organizations operate, offering new efficiencies and capabilities. However, these advancements also create a more complex cybersecurity envir…