A Lifecycle-Oriented Survey of Emerging Threats and Vulnerabilities in Large Language Models
Author(s) -
Carmen De Maio,
Maria Di Gisi,
Giuseppe Fenza,
Mariacristina Gallo,
Vincenzo Loia
Publication year - 2025
Publication title -
ieee access
Language(s) - English
Resource type - Magazines
SCImago Journal Rank - 0.587
H-Index - 127
eISSN - 2169-3536
DOI - 10.1109/access.2025.3619764
Subject(s) - aerospace , bioengineering , communication, networking and broadcast technologies , components, circuits, devices and systems , computing and processing , engineered materials, dielectrics and plasmas , engineering profession , fields, waves and electromagnetics , general topics for engineers , geoscience , nuclear engineering , photonics and electrooptics , power, energy and industry applications , robotics and control systems , signal processing and analysis , transportation
Large Language Models (LLMs) have become key enablers for a wide range of natural language tasks, spanning understanding, generation, and inference across various applications and industrial domains. However, their increasing adoption has brought to light numerous security and privacy vulnerabilities, some of which remain insufficiently studied. This paper aims to identify and examine underexplored vulnerabilities affecting LLMs, with particular attention to threats that remain underrepresented in current literature. The selection of vulnerabilities is guided by a systematic comparison of four major surveys, prioritizing in-depth analysis for vulnerabilities absent in at least three of these works. The methodological approach combines a targeted literature search across major academic databases with strict inclusion and exclusion criteria focused on relevance, novelty, and the selection of peer-reviewed journal and conference publications.The survey introduces a taxonomy based on the LLM lifecycle (i.e., training, inference, and deployment) through which 17 vulnerabilities are categorized and discussed. Eight emerging threats (e.g., model collapse, gradient leakage, denial-of-service, and dependency risks) receive comprehensive analysis, reflecting their growing relevance and limited prior exploration. The result is a structured taxonomy and in-depth analysis designed to guide both academic investigations and practical efforts toward the secure deployment of LLMs in real-world environments. In addition to mapping the current threat landscape, this survey highlights open challenges and outlines key directions for future research.
Accelerating Research
Robert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom
Address
John Eccles HouseRobert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom