Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents
This work addresses risks for researchers and developers using LLM-based agents, but it is incremental as it builds on existing survey efforts with a new taxonomy.
The paper surveys security, privacy, and ethics threats in LLM-based agents, proposing a novel taxonomy framework to address cross-module and cross-stage risks and analyzing current research limitations and future directions.
With the continuous development of large language models (LLMs), transformer-based models have made groundbreaking advances in numerous natural language processing (NLP) tasks, leading to the emergence of a series of agents that use LLMs as their control hub. While LLMs have achieved success in various tasks, they face numerous security and privacy threats, which become even more severe in the agent scenarios. To enhance the reliability of LLM-based applications, a range of research has emerged to assess and mitigate these risks from different perspectives. To help researchers gain a comprehensive understanding of various risks, this survey collects and analyzes the different threats faced by these agents. To address the challenges posed by previous taxonomies in handling cross-module and cross-stage threats, we propose a novel taxonomy framework based on the sources and impacts. Additionally, we identify six key features of LLM-based agents, based on which we summarize the current research progress and analyze their limitations. Subsequently, we select four representative agents as case studies to analyze the risks they may face in practical use. Finally, based on the aforementioned analyses, we propose future research directions from the perspectives of data, methodology, and policy, respectively.