{"id":"https://openalex.org/W4414128359","doi":"https://doi.org/10.1145/3764113","title":"Unique Security and Privacy Threats of Large Language Models: A Comprehensive Survey","display_name":"Unique Security and Privacy Threats of Large Language Models: A Comprehensive Survey","publication_year":2025,"publication_date":"2025-09-11","ids":{"openalex":"https://openalex.org/W4414128359","doi":"https://doi.org/10.1145/3764113"},"language":"en","primary_location":{"id":"doi:10.1145/3764113","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3764113","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3764113","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3764113","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102805627","display_name":"Shang Wang","orcid":"https://orcid.org/0000-0002-5114-4659"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shang Wang","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney","School of Computer Science, University of Technology Sydney, Ultimo, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5114-4659","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101870553","display_name":"Tianqing Zhu","orcid":"https://orcid.org/0000-0003-0702-7102"},"institutions":[{"id":"https://openalex.org/I204512498","display_name":"University of Macau","ror":"https://ror.org/01r4q9n85","country_code":"MO","type":"education","lineage":["https://openalex.org/I204512498"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Tianqing Zhu","raw_affiliation_strings":["Faculty of Data Science, City University of Macau","Faculty of Data Science, City University of Macau, Taipa, Macao"],"raw_orcid":"https://orcid.org/0000-0003-0702-7102","affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Taipa, Macao","institution_ids":["https://openalex.org/I204512498"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100461646","display_name":"Bo Liu","orcid":"https://orcid.org/0000-0002-3603-6617"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Bo Liu","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney","School of Computer Science, University of Technology Sydney, Ultimo, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3603-6617","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075722123","display_name":"Ming Ding","orcid":"https://orcid.org/0000-0002-3690-0321"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ming Ding","raw_affiliation_strings":["Data61","Data61, Eveleigh, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3690-0321","affiliations":[{"raw_affiliation_string":"Data61","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"Data61, Eveleigh, Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065910481","display_name":"Dayong Ye","orcid":"https://orcid.org/0000-0002-7561-0992"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I204512498","display_name":"University of Macau","ror":"https://ror.org/01r4q9n85","country_code":"MO","type":"education","lineage":["https://openalex.org/I204512498"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["AU","MO"],"is_corresponding":false,"raw_author_name":"Dayong Ye","raw_affiliation_strings":["Faculty of Data Science, City University of Macau","School of Computer Science, University of Technology Sydney","Faculty of Data Science, City University of Macau, Taipa, Macao","School of Computer Science, University of Technology Sydney, Ultimo, Australia"],"raw_orcid":"https://orcid.org/0000-0002-7561-0992","affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Taipa, Macao","institution_ids":["https://openalex.org/I204512498"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051406984","display_name":"Wanlei Zhou","orcid":"https://orcid.org/0000-0002-1680-2521"},"institutions":[{"id":"https://openalex.org/I204512498","display_name":"University of Macau","ror":"https://ror.org/01r4q9n85","country_code":"MO","type":"education","lineage":["https://openalex.org/I204512498"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Wanlei Zhou","raw_affiliation_strings":["City University of Macau","City University of Macau, Taipa, Macao"],"raw_orcid":"https://orcid.org/0000-0002-1680-2521","affiliations":[{"raw_affiliation_string":"City University of Macau","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"City University of Macau, Taipa, Macao","institution_ids":["https://openalex.org/I204512498"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036357902","display_name":"Philip S. Yu","orcid":"https://orcid.org/0000-0002-3491-5968"},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Philip Yu","raw_affiliation_strings":["Department of Computer Science, University of Illinois at Chicago","Department of Computer Science, University of Illinois at Chicago, Chicago, United States"],"raw_orcid":"https://orcid.org/0000-0002-3491-5968","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Illinois at Chicago","institution_ids":["https://openalex.org/I39422238"]},{"raw_affiliation_string":"Department of Computer Science, University of Illinois at Chicago, Chicago, United States","institution_ids":["https://openalex.org/I39422238"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":35.163,"has_fulltext":true,"cited_by_count":32,"citation_normalized_percentile":{"value":0.9972354,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":"58","issue":"4","first_page":"1","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.9891999959945679,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.5551000237464905},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.5004000067710876},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.44909998774528503},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3815999925136566},{"id":"https://openalex.org/keywords/natural-language-generation","display_name":"Natural language generation","score":0.2980000078678131}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7538999915122986},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.5551000237464905},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.5004000067710876},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4943999946117401},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4927000105381012},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.44909998774528503},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4392000138759613},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3815999925136566},{"id":"https://openalex.org/C2776187449","wikidata":"https://www.wikidata.org/wiki/Q1513879","display_name":"Natural language generation","level":3,"score":0.2980000078678131},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2827000021934509},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.27559998631477356}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3764113","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3764113","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3764113","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3764113","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3764113","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3764113","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414128359.pdf","grobid_xml":"https://content.openalex.org/works/W4414128359.grobid-xml"},"referenced_works_count":75,"referenced_works":["https://openalex.org/W1566289585","https://openalex.org/W2473418344","https://openalex.org/W2750779823","https://openalex.org/W2807363941","https://openalex.org/W3098267758","https://openalex.org/W3109409894","https://openalex.org/W3128663834","https://openalex.org/W3141199462","https://openalex.org/W3158360872","https://openalex.org/W3195374612","https://openalex.org/W4205991051","https://openalex.org/W4281806276","https://openalex.org/W4283211054","https://openalex.org/W4285228085","https://openalex.org/W4285247752","https://openalex.org/W4285729166","https://openalex.org/W4287691174","https://openalex.org/W4287888099","https://openalex.org/W4308410483","https://openalex.org/W4310415871","https://openalex.org/W4313547874","https://openalex.org/W4319793479","https://openalex.org/W4383045326","https://openalex.org/W4383176079","https://openalex.org/W4383221538","https://openalex.org/W4385452929","https://openalex.org/W4385565597","https://openalex.org/W4385570262","https://openalex.org/W4385570794","https://openalex.org/W4385570888","https://openalex.org/W4385571830","https://openalex.org/W4385572293","https://openalex.org/W4385573108","https://openalex.org/W4385734162","https://openalex.org/W4386187806","https://openalex.org/W4388049829","https://openalex.org/W4388117872","https://openalex.org/W4388488609","https://openalex.org/W4388858191","https://openalex.org/W4388867283","https://openalex.org/W4388886073","https://openalex.org/W4389009524","https://openalex.org/W4389519269","https://openalex.org/W4389520346","https://openalex.org/W4389523771","https://openalex.org/W4391558438","https://openalex.org/W4391725284","https://openalex.org/W4391974622","https://openalex.org/W4392011801","https://openalex.org/W4392353733","https://openalex.org/W4392449489","https://openalex.org/W4392903596","https://openalex.org/W4392909875","https://openalex.org/W4394743995","https://openalex.org/W4400019960","https://openalex.org/W4400484590","https://openalex.org/W4400997514","https://openalex.org/W4401042350","https://openalex.org/W4401043416","https://openalex.org/W4402264152","https://openalex.org/W4402264463","https://openalex.org/W4402671843","https://openalex.org/W4404783046","https://openalex.org/W4405181600","https://openalex.org/W4405181744","https://openalex.org/W4405181769","https://openalex.org/W4405182525","https://openalex.org/W4405183017","https://openalex.org/W4405183113","https://openalex.org/W4406302454","https://openalex.org/W4408749786","https://openalex.org/W4411119537","https://openalex.org/W4412130408","https://openalex.org/W4412889952","https://openalex.org/W4412945563"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"With":[0],"the":[1,63,94,112],"rapid":[2],"development":[3],"of":[4,47,85,114],"artificial":[5],"intelligence,":[6],"large":[7],"language":[8,17,29,75],"models":[9,20,88],"(LLMs)":[10],"have":[11,43],"made":[12],"remarkable":[13],"advancements":[14],"in":[15],"natural":[16],"processing.":[18],"These":[19],"are":[21],"trained":[22],"on":[23,125],"vast":[24],"datasets":[25],"to":[26,138],"exhibit":[27],"powerful":[28],"understanding":[30],"and":[31,39,49,59,97,108,120,127],"generation":[32],"capabilities":[33],"across":[34,89],"various":[35],"applications,":[36],"including":[37],"chatbots":[38],"agents.":[40,110],"However,":[41],"LLMs":[42,67],"revealed":[44],"a":[45,82],"variety":[46],"privacy":[48,96],"security":[50,98],"issues":[51],"throughout":[52],"their":[53],"life":[54],"cycle,":[55],"drawing":[56],"significant":[57],"academic":[58],"industrial":[60],"attention.":[61],"Moreover,":[62],"risks":[64],"faced":[65],"by":[66,73],"differ":[68],"significantly":[69],"from":[70,140],"those":[71],"encountered":[72],"traditional":[74],"models.":[76],"Given":[77],"that":[78],"current":[79],"surveys":[80],"lack":[81],"clear":[83],"taxonomy":[84],"unique":[86,95],"threat":[87],"diverse":[90],"scenarios,":[91],"we":[92],"emphasize":[93],"threats":[99],"associated":[100],"with":[101],"four":[102],"specific":[103],"scenarios:":[104],"pre-training,":[105],"fine-tuning,":[106],"deployment,":[107],"LLM-based":[109],"Addressing":[111],"characteristics":[113],"each":[115],"risk,":[116],"this":[117],"survey":[118],"outlines":[119],"analyzes":[121],"potential":[122],"countermeasures.":[123],"Research":[124],"attack":[126],"defense":[128],"situations":[129],"can":[130],"offer":[131],"feasible":[132],"research":[133],"directions,":[134],"enabling":[135],"more":[136],"areas":[137],"benefit":[139],"LLMs.":[141]},"counts_by_year":[{"year":2026,"cited_by_count":30},{"year":2025,"cited_by_count":2}],"updated_date":"2026-08-24T07:32:12.397491","created_date":"2025-10-10T00:00:00"}