{"id":"https://openalex.org/W4415003002","doi":"https://doi.org/10.1109/access.2025.3619764","title":"A Lifecycle-Oriented Survey of Emerging Threats and Vulnerabilities in Large Language Models","display_name":"A Lifecycle-Oriented Survey of Emerging Threats and Vulnerabilities in Large Language Models","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415003002","doi":"https://doi.org/10.1109/access.2025.3619764"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3619764","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3619764","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3619764","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008984322","display_name":"Carmen De Maio","orcid":"https://orcid.org/0000-0003-0641-4792"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Carmen de Maio","raw_affiliation_strings":["Department of Computer Science, University of Salerno, Fisciano, Italy","Department of Computer Science, University of Salerno, Fisciano, SA, Italy"],"raw_orcid":"https://orcid.org/0000-0003-0641-4792","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Salerno, Fisciano, Italy","institution_ids":["https://openalex.org/I131729948"]},{"raw_affiliation_string":"Department of Computer Science, University of Salerno, Fisciano, SA, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5098966334","display_name":"Maria Di Gisi","orcid":null},"institutions":[{"id":"https://openalex.org/I127077003","display_name":"IMT School for Advanced Studies Lucca","ror":"https://ror.org/035gh3a49","country_code":"IT","type":"education","lineage":["https://openalex.org/I127077003"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Maria Di Gisi","raw_affiliation_strings":["IMT School for Advanced Studies Lucca, Lucca, Italy","IMT School for Advanced Studies Lucca, Lucca, LU, Italy"],"raw_orcid":"https://orcid.org/0009-0003-5434-5426","affiliations":[{"raw_affiliation_string":"IMT School for Advanced Studies Lucca, Lucca, Italy","institution_ids":["https://openalex.org/I127077003"]},{"raw_affiliation_string":"IMT School for Advanced Studies Lucca, Lucca, LU, Italy","institution_ids":["https://openalex.org/I127077003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016277608","display_name":"Giuseppe Fenza","orcid":"https://orcid.org/0000-0002-4736-0113"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giuseppe Fenza","raw_affiliation_strings":["Department of Management and Innovation Systems, University of Salerno, Fisciano, Italy","Department of Management and Innovation Systems, University of Salerno, Fisciano, SA, Italy"],"raw_orcid":"https://orcid.org/0000-0002-4736-0113","affiliations":[{"raw_affiliation_string":"Department of Management and Innovation Systems, University of Salerno, Fisciano, Italy","institution_ids":["https://openalex.org/I131729948"]},{"raw_affiliation_string":"Department of Management and Innovation Systems, University of Salerno, Fisciano, SA, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075091553","display_name":"Mariacristina Gallo","orcid":"https://orcid.org/0000-0002-5474-2697"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mariacristina Gallo","raw_affiliation_strings":["Department of Management and Innovation Systems, University of Salerno, Fisciano, Italy","Department of Management and Innovation Systems, University of Salerno, Fisciano, SA, Italy"],"raw_orcid":"https://orcid.org/0000-0002-5474-2697","affiliations":[{"raw_affiliation_string":"Department of Management and Innovation Systems, University of Salerno, Fisciano, Italy","institution_ids":["https://openalex.org/I131729948"]},{"raw_affiliation_string":"Department of Management and Innovation Systems, University of Salerno, Fisciano, SA, Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036423849","display_name":"Vincenzo Loia","orcid":"https://orcid.org/0000-0003-4807-8942"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Vincenzo Loia","raw_affiliation_strings":["Department of Management and Innovation Systems, University of Salerno, Fisciano, Italy","Department of Management and Innovation Systems, University of Salerno, Fisciano, SA, Italy"],"raw_orcid":"https://orcid.org/0000-0003-4807-8942","affiliations":[{"raw_affiliation_string":"Department of Management and Innovation Systems, University of Salerno, Fisciano, Italy","institution_ids":["https://openalex.org/I131729948"]},{"raw_affiliation_string":"Department of Management and Innovation Systems, University of Salerno, Fisciano, SA, Italy","institution_ids":["https://openalex.org/I131729948"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.584,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.95830573,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"176482","last_page":"176500"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.8440999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.8440999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.7286999821662903,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.5598000288009644},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.542900025844574},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.5072000026702881},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4828000068664551},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.45179998874664307},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.43779999017715454},{"id":"https://openalex.org/keywords/inclusion","display_name":"Inclusion (mineral)","score":0.41290000081062317},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4034999907016754},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.40230000019073486}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6665999889373779},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.5598000288009644},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.542900025844574},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.5072000026702881},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4878000020980835},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4828000068664551},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.45179998874664307},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.43779999017715454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.436599999666214},{"id":"https://openalex.org/C109359841","wikidata":"https://www.wikidata.org/wiki/Q728944","display_name":"Inclusion (mineral)","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4034999907016754},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.40230000019073486},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.3961000144481659},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.38749998807907104},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.37059998512268066},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3156000077724457},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.303600013256073},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.3009999990463257},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.27140000462532043},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2687000036239624},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.26669999957084656},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.26409998536109924},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.2632000148296356},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2565999925136566},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2554999887943268},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.25440001487731934},{"id":"https://openalex.org/C528167355","wikidata":"https://www.wikidata.org/wiki/Q258307","display_name":"National security","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3619764","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3619764","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:efefa0f67a2d4f9d9144f7cecf416fc7","is_oa":true,"landing_page_url":"https://doaj.org/article/efefa0f67a2d4f9d9144f7cecf416fc7","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 176482-176500 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3619764","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3619764","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W3153046263","https://openalex.org/W4226101361","https://openalex.org/W4283170666","https://openalex.org/W4312604272","https://openalex.org/W4376626934","https://openalex.org/W4382202847","https://openalex.org/W4382318449","https://openalex.org/W4385452929","https://openalex.org/W4386566667","https://openalex.org/W4387846550","https://openalex.org/W4388858734","https://openalex.org/W4388886073","https://openalex.org/W4389518784","https://openalex.org/W4389524379","https://openalex.org/W4389524506","https://openalex.org/W4391985880","https://openalex.org/W4392353733","https://openalex.org/W4392654282","https://openalex.org/W4392720167","https://openalex.org/W4393035858","https://openalex.org/W4393305319","https://openalex.org/W4399146384","https://openalex.org/W4399548847","https://openalex.org/W4399750638","https://openalex.org/W4400121375","https://openalex.org/W4400484832","https://openalex.org/W4400949264","https://openalex.org/W4401042876","https://openalex.org/W4401484139","https://openalex.org/W4402634371","https://openalex.org/W4402670855","https://openalex.org/W4402683786","https://openalex.org/W4402684203","https://openalex.org/W4403278985","https://openalex.org/W4404037751","https://openalex.org/W4404534210","https://openalex.org/W4404781805","https://openalex.org/W4404782334","https://openalex.org/W4404783584","https://openalex.org/W4404797809","https://openalex.org/W4404978447","https://openalex.org/W4405181589","https://openalex.org/W4405740130","https://openalex.org/W4405845303","https://openalex.org/W4406302454","https://openalex.org/W4406586623","https://openalex.org/W4407147258","https://openalex.org/W4408051337","https://openalex.org/W4409198830","https://openalex.org/W4409361704","https://openalex.org/W4409796518","https://openalex.org/W4411552367","https://openalex.org/W4412388539"],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"have":[4],"become":[5],"key":[6,213],"enablers":[7],"for":[8,85,215],"a":[9,75,99,128,174],"wide":[10],"range":[11],"of":[12,41,70,78,92,120,193],"natural":[13],"language":[14],"tasks,":[15],"spanning":[16],"understanding,":[17],"generation,":[18],"and":[19,24,37,51,110,117,123,138,146,157,167,177,186,211],"inference":[20],"across":[21,103],"various":[22],"applications":[23],"industrial":[25],"domains.":[26],"However,":[27],"their":[28,164],"increasing":[29],"adoption":[30],"has":[31],"brought":[32],"to":[33,49,60,181,200],"light":[34],"numerous":[35],"security":[36],"privacy":[38],"vulnerabilities,":[39],"some":[40],"which":[42,141],"remain":[43,63],"insufficiently":[44],"studied.":[45],"This":[46],"paper":[47],"aims":[48],"identify":[50],"examine":[52],"underexplored":[53],"vulnerabilities":[54,71,86,143],"affecting":[55],"LLMs,":[56],"with":[57,107],"particular":[58],"attention":[59],"threats":[61,150],"that":[62],"underrepresented":[64],"in":[65,88,195],"current":[66,203],"literature.":[67],"The":[68,95,171],"selection":[69,119],"is":[72,173],"guided":[73],"by":[74],"systematic":[76],"comparison":[77],"four":[79],"major":[80,104],"surveys,":[81],"prioritizing":[82],"in-depth":[83,178],"analysis":[84,179],"absent":[87],"at":[89],"least":[90],"three":[91],"these":[93],"works.":[94],"methodological":[96],"approach":[97],"combines":[98],"targeted":[100],"literature":[101],"search":[102],"academic":[105,184],"databases":[106],"strict":[108],"inclusion":[109],"exclusion":[111],"criteria":[112],"focused":[113],"on":[114,131],"relevance,":[115],"novelty,":[116],"the":[118,132,190,202],"peer-reviewed":[121],"journal":[122],"conference":[124],"publications.The":[125],"survey":[126,207],"introduces":[127],"taxonomy":[129,176],"based":[130],"LLM":[133],"lifecycle":[134],"(i.e.,":[135],"training,":[136],"inference,":[137],"deployment)":[139],"through":[140],"17":[142],"are":[144],"categorized":[145],"discussed.":[147],"Eight":[148],"emerging":[149],"(e.g.,":[151],"model":[152],"collapse,":[153],"gradient":[154],"leakage,":[155],"denial-of-service,":[156],"dependency":[158],"risks)":[159],"receive":[160],"comprehensive":[161],"analysis,":[162],"reflecting":[163],"growing":[165],"relevance":[166],"limited":[168],"prior":[169],"exploration.":[170],"result":[172],"structured":[175],"designed":[180],"guide":[182],"both":[183],"investigations":[185],"practical":[187],"efforts":[188],"toward":[189],"secure":[191],"deployment":[192],"LLMs":[194],"real-world":[196],"environments.":[197],"In":[198],"addition":[199],"mapping":[201],"threat":[204],"landscape,":[205],"this":[206],"highlights":[208],"open":[209],"challenges":[210],"outlines":[212],"directions":[214],"future":[216],"research.":[217]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}