{"id":486,"date":"2026-10-08T00:44:00","date_gmt":"2026-10-08T04:44:00","guid":{"rendered":"https:\/\/fabritorrico.whiteboxltda.com\/?p=486"},"modified":"2026-10-08T01:15:13","modified_gmt":"2026-10-08T05:15:13","slug":"citc-2026-ia-defendiendo-ia-de-ataques-generados-por-ia","status":"publish","type":"post","link":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/seguridad\/citc-2026-ia-defendiendo-ia-de-ataques-generados-por-ia\/","title":{"rendered":"CITC 2026 &#8211; IA defendiendo IA de ataques generados por IA"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"860\" height=\"282\" src=\"https:\/\/fabritorrico.whiteboxltda.com\/wp-content\/uploads\/2026\/10\/image.png\" alt=\"\" class=\"wp-image-490\" srcset=\"https:\/\/fabritorrico.whiteboxltda.com\/wp-content\/uploads\/2026\/10\/image.png 860w, https:\/\/fabritorrico.whiteboxltda.com\/wp-content\/uploads\/2026\/10\/image-300x98.png 300w, https:\/\/fabritorrico.whiteboxltda.com\/wp-content\/uploads\/2026\/10\/image-768x252.png 768w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/figure>\n\n\n\n<!--more-->\n\n\n\n<p>En octubre 2026, en el <strong>Congreso Internacional de Tecnolog\u00eda y Ciberseguridad <\/strong><a rel=\"noreferrer noopener\" href=\"https:\/\/citc.agetic.gob.bo\/expositor\/67ad8aaf-1442-4e5f-adb9-7c75867d824c\" target=\"_blank\">CI<\/a><a rel=\"noreferrer noopener\" href=\"https:\/\/citc.agetic.gob.bo\/expositor\/67ad8aaf-1442-4e5f-adb9-7c75867d824c\" target=\"_blank\">T<\/a><a rel=\"noreferrer noopener\" href=\"https:\/\/citc.agetic.gob.bo\/expositor\/67ad8aaf-1442-4e5f-adb9-7c75867d824c\" target=\"_blank\">C<\/a> llevado a cabo en Sucre &#8211; Bolivia, tuve la oportunidad de presentar una investigaci\u00f3n en la que exploramos una pregunta que cada vez resulta m\u00e1s relevante:<\/p>\n\n\n\n<p><strong>\u00bfQu\u00e9 ocurre cuando utilizamos IA para atacar aplicaciones basadas en IA y, posteriormente, otras capacidades de IA para analizarlas y fortalecerlas?<\/strong><\/p>\n\n\n\n<p>Durante la presentaci\u00f3n mostr\u00e9 un experimento pr\u00e1ctico de <strong>Prompt Injection, red teaming y hardening iterativo<\/strong>, utilizando <strong>OWASP AI Vulnerabilities Playground, Promptfoo, ChatGPT y GitHub Copilot<\/strong>, bajo supervisi\u00f3n y orquestaci\u00f3n humana.<\/p>\n\n\n\n<p>M\u00e1s que buscar demostrar que un sistema puede quedar \u201c100% seguro\u201d, el objetivo fue observar qu\u00e9 ocurre despu\u00e9s de aplicar una medida de seguridad: <strong>\u00bfrealmente corregimos la vulnerabilidad?, \u00bfeliminamos el impacto?, \u00bfo simplemente desplazamos el problema?<\/strong><\/p>\n\n\n\n<p>Uno de los principales aprendizajes fue precisamente ese: <strong>el hardening de aplicaciones LLM no deber\u00eda terminar cuando un ataque deja de funcionar; debe continuar con nuevas pruebas y reevaluaciones.<\/strong><\/p>\n\n\n\n<p>Comparto el <strong>video de la presentaci\u00f3n y las diapositivas<\/strong> para quienes tengan inter\u00e9s en explorar un poco m\u00e1s sobre seguridad de aplicaciones basadas en LLM, Prompt Injection y el uso de IA en ambos lados del proceso: <strong>atacando y defendiendo<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-genially wp-block-embed-genially\"><div class=\"wp-block-embed__wrapper\">\n<iframe class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" title=\"IA protegiendo IA de la IA\" frameborder='0' width='1200' height='675' src='https:\/\/view.genially.com\/6ab1c57b89c4dd969fddd2b0#?secret=LRbjjGiPLR' data-secret='LRbjjGiPLR' scrolling='yes'><\/iframe>\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"CITC 2026 - IA defendiendo IA de ataques generados por IA\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/P6XXx0eBveY?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[49,44,50,45,47,48,46],"_links":{"self":[{"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/posts\/486"}],"collection":[{"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/comments?post=486"}],"version-history":[{"count":3,"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/posts\/486\/revisions"}],"predecessor-version":[{"id":492,"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/posts\/486\/revisions\/492"}],"wp:attachment":[{"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/media?parent=486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/categories?post=486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fabritorrico.whiteboxltda.com\/index.php\/wp-json\/wp\/v2\/tags?post=486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}