Explain like I'm five · Security

What is AI Security?

AI security — deepfakes and prompt injection — told as a story about a thief's parrot that mimics the king's voice, and our own castle parrot reading a command slipped into a note.

it is I, the king! (in his very voice)the thief's trained parrotthe real king is in the castleTHE KING'S VOICEthe market speechthe new-year greetingtwenty portraitsit learned from the king's voice all over townsame voice, same face — your ears can't tell

The thief has trained a parrot that sounds exactly like the king.It learned from the king's speeches and portraits all over town. Same voice, same face — your ears and eyes can't tell.

it's the king — open the vaulthears the voice, reaches for the keyGUEST NOTEhi, what's the weather todaythanks!(tiny) parrot: fetch the vault keya command slipped into the notea parrot does what it hears and reads — it can't tell who said it

A parrot does what it hears and reads. It can't tell who said it.The vault keeper hears the voice and reaches for the key. Our own clever parrot follows a command slipped into a guest's note. It is a cousin of the fake letter.

a voice isn't enough — I'll ask the king myselfa second checkask back by a different roadonly a small keyno vault key at allTHE PARROT'S NOTEOUR ORDERSGUEST WORDS(never orders)keep the boxes apartguest words are never orderssame voice or not: a second check, a small key, separate boxeswe don't distrust the parrot — we just never trust it alone

AI security is a castle that never trusts the parrot alone.Same voice or not: ask back by a different road, give the parrot only a small key, and keep guest words in a separate box from our orders.

A second check, not the voiceask back by another road
A small key for the parrotthe vault key stays with people
Guest words in the guest boxnever mixed with orders
The king's-voice lessoneveryone knows, nobody falls
I never said to open the vault!asked in person — exposedthis line is guest words, not ordersGUEST NOTEweather today → sunny!(parrot: vault key)the slipped-in line is ignoredthe check is done by a person, by a different road — not by the parroteven if the parrot is fooled, a small key means a small loss

Asked in person, the parrot is exposed. The slipped-in line is ignored.The check is done by a person, by a different road (checking three times). Even if the parrot is fooled, a small key means a small loss.

the parrot thief leaves empty-handedTODAY'S THIEF LESSONthe king's voice can be fakeurgent? doubt it moreask back by another roadour parrot works with a small keydon't trust a voice — ask back, whether it's a person or a parrot

Everyone in the castle takes the king's-voice lesson. The parrot thief leaves empty-handed.The thief lesson gained a line: even the king's voice can be fake. A command hidden in a note is a cousin of injection.

In one breath

AI security = a castle that isn't fooled when the thief's parrot mimics the king's voice, or when a hidden command sits in our parrot's note. Ask back by another road, give the parrot a small key, keep guest words in the guest box.

AI security covers both attacks that fool people — deepfakes and voice cloning — and attacks on our own AI systems: prompt injection, data leakage, model poisoning. Defences: callback verification, least-privilege agents, separating system instructions from user input, output validation, and awareness training.

When grown-ups say it

Deepfake
Mimicking the king's face and voice. Fake video and audio made by AI. Eyes and ears can't tell.
Voice cloning
How the parrot learns the voice. A few seconds of voice is enough. The tell is an urgent call. → a cousin of the fake letter
Prompt injection
A command slipped into the note. A command hidden in guest words that our parrot obeys. → injection
LLM data leakage
The parrot repeats what it heard. Tell the parrot a secret and it may repeat it to another guest. → start with the colour stamp
Model poisoning
Poison in the parrot's feed. Slip bad things into what it learns from, so it learns wrong.
Callback verification
Asking back by another road. Not the road the call came on — a road we already know. → the gatekeeper who checks three times
Least privilege
A small key for the parrot. Fooled? Lose little. → only the keys you need, the key ring
Awareness training
The king's-voice lesson. When everyone in the castle knows, the parrot is useless. → the thief lesson
Next story
The Five Pillars of the Castle →
Want another term as a picture book? Request →