Hi i am SEM,
how can i help you

Semos Education Semos Education
  • Monday - Friday 9:00 AM - 10:00 PM CET
  • Call us now +44 7487633466
  • Keep in touch info@semosedu.com
EN / МК / RS
Кошничка
reserve a seat
  • Description
  • Content
  • Target Audience
  • Certificates

Certified Offensive AI Security Professional (C|OASP) is a practical, hands-on course that teaches cybersecurity professionals how to identify, test, and secure vulnerabilities in Artificial Intelligence (AI) systems. As organizations increasingly adopt AI technologies such as Large Language Models (LLMs), chatbots, AI assistants, and autonomous agents, new security risks are emerging that traditional security testing methods cannot fully address.

 

This course provides participants with the knowledge and skills needed to understand how attackers target AI systems and how to effectively protect them. Through real-world scenarios and hands-on exercises, learners explore topics such as prompt injection, AI model manipulation, data poisoning, AI agent attacks, vulnerability assessment, and AI-specific incident response.

 

Participants will learn how to assess AI applications for security weaknesses, test the resilience of AI systems against attacks, implement protective controls, and support the secure deployment of AI technologies within their organizations. The course follows recognized industry frameworks and best practices to help professionals build confidence in securing modern AI environments.

 

Whether your organization is developing AI solutions, integrating AI-powered applications, or managing AI-related risks, C|OASP provides the practical skills needed to strengthen security and ensure AI systems remain trustworthy, resilient, and compliant.

Module 01
Offensive AI and AI System Hacking Methodology
Build a foundation in offensive AI security by learning how AI systems are designed, where they fail, and how adversaries exploit them, using structured hacking methodologies and globally recognized AI security frameworks.
What You will Learn
• Understand AI and machine learning fundamentals from an offensive security perspective
• Identify AI attack surfaces, threat landscapes, and adversary techniques aligned to MITRE ATLAS
• Apply AI system hacking methodologies, frameworks, and risk implications
• Classify AI attack taxonomies and models
• Define offensive AI scoping fundamentals and foundations for securing AI systems
• Provide an overview and mapping of OWASP LLM & ML Top 10 (2025) to AI threats and governance considerations
Module 02
AI Reconnaissance and Attack Surface Mapping
Learn advanced AI-focused OSINT techniques to identify, enumerate, and analyze AI assets, data pipelines, models, APIs, and attack surfaces, and apply exposure mitigation and hardening strategies to support continuous AI security monitoring.
What You will Learn
• Apply OSINT tools and techniques to identify and profile AI assets
• Gather intelligence from AI data sources and training pipelines
• Discover and map AI attack surfaces using publicly available intelligence
• Enumerate AI endpoints, services, APIs, and exposed parameters
• Identify and analyze AI models and vector stores from an attacker’s perspective
• Evaluate OSINT exposure and apply hardening controls to reduce risk
• Use AI threat intelligence to support continuous monitoring and defensive readiness
Module 03
AI Vulnerability Scanning and Fuzzing
Master AI-specific vulnerability assessment and fuzzing techniques to identify, analyze, and mitigate security weaknesses across modern AI systems and applications.
What You will Learn
• Understand core principles of AI vulnerability assessment and threat discovery
• Use tools and techniques for scanning vulnerabilities in AI models, pipelines, and deployments
• Apply practical fuzzing methods tailored for AI systems and model interfaces
• Integrate scanning and fuzzing into AI security workflows for proactive risk mitigation
Module 04
Prompt Injection and LLM Application Attacks
Analyze and exploit LLM trust boundaries using advanced prompt injection, jailbreaking, and output manipulation techniques, while identifying risks related to sensitive data exposure and insecure LLM application design.
What You will Learn
•LLM architecture, trust boundaries, and associated attack vectors
• Execute prompt injection and jailbreaking techniques in real-world LLM applications
• Identify sensitive information disclosure and system prompt leakage risks
• Evaluate improper output handling vulnerabilities and misinformation threats
• Apply advanced prompt-based attack techniques and exploitation strategies
• Implement secure LLM application design principles and defensive controls
Module 05
Adversarial Machine Learning and Model Privacy Attacks
Execute and analyze adversarial machine learning, privacy, and model extraction attacks to assess AI system robustness, trustworthiness, and risk, and apply defensive strategies to mitigate them.
What You will Learn
• Identify core adversarial machine learning attack classes
• Execute practical adversarial input attacks across data modalities
• Apply privacy, inference, and model extraction attack techniques
• Evaluate robustness, trustworthiness, and risk evaluation methods
• Implement defensive strategies for model privacy and resilience
Module 06
Data and Training Pipeline Attacks
Compromise AI systems through data poisoning and backdoor insertion targeting training pipelines and model integrity.
What You will Learn
• Understand AI data and training pipeline architecture and threat surfaces
• Execute practical data poisoning techniques and attack scenarios
• Apply backdoor and trojan insertion during model training
• Implement security measures to safeguard data and training pipelines
Module 07
Agentic AI and Model-to-Model Attacks
Analyze and exploit autonomous AI agents and multi-model architectures by targeting excessive agency, cross-LLM interactions, orchestration workflows, and unbounded resource consumption, while understanding defensive strategies to secure agentic systems.
What You will Learn
• Understand agentic AI architecture and attack surface
• Apply excessive agency and autonomy exploitation techniques
• Identify cross-LLM and model-to-model attack vectors
• Asses denial-of-wallet risks and unbounded resource consumption
• Execute attacks targeting AI workflows and orchestration layers
• Implement defensive strategies for securing agentic AI applications
Module 08
AI Infrastructure and Supply Chain Attacks
Explore offensive techniques targeting AI infrastructure, system integrations, and third-party dependencies, while learning how to identify, exploit, and harden AI supply chain weaknesses.
What You will Learn
• Understand AI infrastructure components and system integration architectures
• Identify vulnerabilities in AI systems, frameworks, and deployment pipelines
• Analyze abuse of tools, plugins, and APIs in AI-enabled applications
• Assess AI supply chain threats and dependency risks (deep dive)
• Implement hardening strategies for AI infrastructure and supply chains
Module 09
AI Security Testing, Evaluation, and Hardening
Apply structured AI security testing and evaluation methodologies to assess risk, validate controls, and implement hardening best practices across enterprise AI systems.
What You will Learn
• Understand AI security testing methodologies and evaluation techniques
• Apply red team frameworks for offensive AI assessment • Identify, validate, and report AI vulnerabilities and risk
• Implement security hardening and mitigation best practices for AI systems
Module 10
AI Incident Response and Forensics
Master AI-specific incident response and forensics, concluding with hands-on engagement in AI red team activities.
What You will Learn
• Detect and respond to AI-specific security incidents
• Collect and analyze AI logs, telemetry, and digital evidence
• Analyze root causes in post-incident analysis
C|OASP is designed for security professionals who wish to master offensive and defensive AI security techniques.
Offensive Security
• Penetration Tester/Ethical Hacker
• Red Team Operator/Red Team Lead
• Offensive Security Engineer
• Adversary Emulation/Purple Team Specialist
Defensive Security
• SOC Analyst (Tier 2/3)/Detection Engineer
• Blue Team Engineer/Threat Detection Engineer
• Incident Responder (IR)/DFIR Analyst
• Security Operations Manager (SOC Lead)
Threat Intelligence
• Malware Analyst/Threat Researcher
• Cyber Threat Intelligence (CTI) Analyst – AI Focus
• Fraud/Abuse Detection Analyst (AI enabled threats)
AI/ML Engineering
• ML Engineer/Applied AI Engineer
• GenAI Engineer (RAG/Agents)
• AI/LLM Application Developer
• MLOps/AI Platform Engineer
Security Engineering
• DevSecOps/Secure DevOps Specialist Defensive Security
• Application Security Engineer (LLM Apps/APIs)
• Product Security Engineer/AI Product Security
AI Security Architecture
• Secure AI Engineer/AI Security Architect
• LLM Systems Engineer

Upon successfully passing the examination, participants earn the EC-Council Certified Offensive AI Security Professional (C|OASP) certification. This globally recognized credential validates the holder’s ability to identify, assess, and defend against security threats targeting AI systems, Large Language Models (LLMs), AI agents, and machine learning environments.

Description

Certified Offensive AI Security Professional (C|OASP) is a practical, hands-on course that teaches cybersecurity professionals how to identify, test, and secure vulnerabilities in Artificial Intelligence (AI) systems. As organizations increasingly adopt AI technologies such as Large Language Models (LLMs), chatbots, AI assistants, and autonomous agents, new security risks are emerging that traditional security testing methods cannot fully address.

 

This course provides participants with the knowledge and skills needed to understand how attackers target AI systems and how to effectively protect them. Through real-world scenarios and hands-on exercises, learners explore topics such as prompt injection, AI model manipulation, data poisoning, AI agent attacks, vulnerability assessment, and AI-specific incident response.

 

Participants will learn how to assess AI applications for security weaknesses, test the resilience of AI systems against attacks, implement protective controls, and support the secure deployment of AI technologies within their organizations. The course follows recognized industry frameworks and best practices to help professionals build confidence in securing modern AI environments.

 

Whether your organization is developing AI solutions, integrating AI-powered applications, or managing AI-related risks, C|OASP provides the practical skills needed to strengthen security and ensure AI systems remain trustworthy, resilient, and compliant.

Content
Module 01
Offensive AI and AI System Hacking Methodology
Build a foundation in offensive AI security by learning how AI systems are designed, where they fail, and how adversaries exploit them, using structured hacking methodologies and globally recognized AI security frameworks.
What You will Learn
• Understand AI and machine learning fundamentals from an offensive security perspective
• Identify AI attack surfaces, threat landscapes, and adversary techniques aligned to MITRE ATLAS
• Apply AI system hacking methodologies, frameworks, and risk implications
• Classify AI attack taxonomies and models
• Define offensive AI scoping fundamentals and foundations for securing AI systems
• Provide an overview and mapping of OWASP LLM & ML Top 10 (2025) to AI threats and governance considerations
Module 02
AI Reconnaissance and Attack Surface Mapping
Learn advanced AI-focused OSINT techniques to identify, enumerate, and analyze AI assets, data pipelines, models, APIs, and attack surfaces, and apply exposure mitigation and hardening strategies to support continuous AI security monitoring.
What You will Learn
• Apply OSINT tools and techniques to identify and profile AI assets
• Gather intelligence from AI data sources and training pipelines
• Discover and map AI attack surfaces using publicly available intelligence
• Enumerate AI endpoints, services, APIs, and exposed parameters
• Identify and analyze AI models and vector stores from an attacker’s perspective
• Evaluate OSINT exposure and apply hardening controls to reduce risk
• Use AI threat intelligence to support continuous monitoring and defensive readiness
Module 03
AI Vulnerability Scanning and Fuzzing
Master AI-specific vulnerability assessment and fuzzing techniques to identify, analyze, and mitigate security weaknesses across modern AI systems and applications.
What You will Learn
• Understand core principles of AI vulnerability assessment and threat discovery
• Use tools and techniques for scanning vulnerabilities in AI models, pipelines, and deployments
• Apply practical fuzzing methods tailored for AI systems and model interfaces
• Integrate scanning and fuzzing into AI security workflows for proactive risk mitigation
Module 04
Prompt Injection and LLM Application Attacks
Analyze and exploit LLM trust boundaries using advanced prompt injection, jailbreaking, and output manipulation techniques, while identifying risks related to sensitive data exposure and insecure LLM application design.
What You will Learn
•LLM architecture, trust boundaries, and associated attack vectors
• Execute prompt injection and jailbreaking techniques in real-world LLM applications
• Identify sensitive information disclosure and system prompt leakage risks
• Evaluate improper output handling vulnerabilities and misinformation threats
• Apply advanced prompt-based attack techniques and exploitation strategies
• Implement secure LLM application design principles and defensive controls
Module 05
Adversarial Machine Learning and Model Privacy Attacks
Execute and analyze adversarial machine learning, privacy, and model extraction attacks to assess AI system robustness, trustworthiness, and risk, and apply defensive strategies to mitigate them.
What You will Learn
• Identify core adversarial machine learning attack classes
• Execute practical adversarial input attacks across data modalities
• Apply privacy, inference, and model extraction attack techniques
• Evaluate robustness, trustworthiness, and risk evaluation methods
• Implement defensive strategies for model privacy and resilience
Module 06
Data and Training Pipeline Attacks
Compromise AI systems through data poisoning and backdoor insertion targeting training pipelines and model integrity.
What You will Learn
• Understand AI data and training pipeline architecture and threat surfaces
• Execute practical data poisoning techniques and attack scenarios
• Apply backdoor and trojan insertion during model training
• Implement security measures to safeguard data and training pipelines
Module 07
Agentic AI and Model-to-Model Attacks
Analyze and exploit autonomous AI agents and multi-model architectures by targeting excessive agency, cross-LLM interactions, orchestration workflows, and unbounded resource consumption, while understanding defensive strategies to secure agentic systems.
What You will Learn
• Understand agentic AI architecture and attack surface
• Apply excessive agency and autonomy exploitation techniques
• Identify cross-LLM and model-to-model attack vectors
• Asses denial-of-wallet risks and unbounded resource consumption
• Execute attacks targeting AI workflows and orchestration layers
• Implement defensive strategies for securing agentic AI applications
Module 08
AI Infrastructure and Supply Chain Attacks
Explore offensive techniques targeting AI infrastructure, system integrations, and third-party dependencies, while learning how to identify, exploit, and harden AI supply chain weaknesses.
What You will Learn
• Understand AI infrastructure components and system integration architectures
• Identify vulnerabilities in AI systems, frameworks, and deployment pipelines
• Analyze abuse of tools, plugins, and APIs in AI-enabled applications
• Assess AI supply chain threats and dependency risks (deep dive)
• Implement hardening strategies for AI infrastructure and supply chains
Module 09
AI Security Testing, Evaluation, and Hardening
Apply structured AI security testing and evaluation methodologies to assess risk, validate controls, and implement hardening best practices across enterprise AI systems.
What You will Learn
• Understand AI security testing methodologies and evaluation techniques
• Apply red team frameworks for offensive AI assessment • Identify, validate, and report AI vulnerabilities and risk
• Implement security hardening and mitigation best practices for AI systems
Module 10
AI Incident Response and Forensics
Master AI-specific incident response and forensics, concluding with hands-on engagement in AI red team activities.
What You will Learn
• Detect and respond to AI-specific security incidents
• Collect and analyze AI logs, telemetry, and digital evidence
• Analyze root causes in post-incident analysis
Target Audience
C|OASP is designed for security professionals who wish to master offensive and defensive AI security techniques.
Offensive Security
• Penetration Tester/Ethical Hacker
• Red Team Operator/Red Team Lead
• Offensive Security Engineer
• Adversary Emulation/Purple Team Specialist
Defensive Security
• SOC Analyst (Tier 2/3)/Detection Engineer
• Blue Team Engineer/Threat Detection Engineer
• Incident Responder (IR)/DFIR Analyst
• Security Operations Manager (SOC Lead)
Threat Intelligence
• Malware Analyst/Threat Researcher
• Cyber Threat Intelligence (CTI) Analyst – AI Focus
• Fraud/Abuse Detection Analyst (AI enabled threats)
AI/ML Engineering
• ML Engineer/Applied AI Engineer
• GenAI Engineer (RAG/Agents)
• AI/LLM Application Developer
• MLOps/AI Platform Engineer
Security Engineering
• DevSecOps/Secure DevOps Specialist Defensive Security
• Application Security Engineer (LLM Apps/APIs)
• Product Security Engineer/AI Product Security
AI Security Architecture
• Secure AI Engineer/AI Security Architect
• LLM Systems Engineer
Certificates

Upon successfully passing the examination, participants earn the EC-Council Certified Offensive AI Security Professional (C|OASP) certification. This globally recognized credential validates the holder’s ability to identify, assess, and defend against security threats targeting AI systems, Large Language Models (LLMs), AI agents, and machine learning environments.

Our students for us:

    Contact

    • Irena Ivanovska Senior Director
      +389 70 246 146 irena@semos.com.mk