Pith. sign in

REVIEW 3 major objections 5 minor 2 cited by

Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey

T0 review · 3 major / 5 minor · reviewed 2026-08-05 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read This survey argues that multi-LLM agentic systems at the edge must abandon perimeter-based defenses for zero-trust security, and it presents the first systematic framework and mechanism taxonomy for that shift.

desk verdict A useful zero-trust survey of multi-LLM edge security whose proposed architecture quietly re-trusts a cloud coordinator. read the letter →

arxiv 2508.19870 v1 pith:O6NHSHXB submitted 2025-08-27 cs.NI

Yinqiu Liu , Ruichen Zhang , Haoxiang Luo , Yijing Lin , Geng Sun , Dusit Niyato , Hongyang Du , Zehui Xiong
show 4 more authors
Yonggang Wen Abbas Jamalipour Dong In Kim Ping Zhang
This is my paper
classification cs.NI
keywords zero-trustsecuritymulti-LLMsystemsedgegeneralintelligence(EGI)agenticAIpromptinjectioncontext-awareaccesscontrolcontinuousmonitoringblockchain
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This survey argues that the usual way of securing AI systems — building a trusted perimeter and defending it — cannot protect networks of collaborating LLMs deployed at the edge in applications like autonomous driving, smart healthcare, and smart grids. The paper's central claim is that these multi-LLM systems should adopt zero-trust security: no user, LLM, message, or tool is trusted by default, and every interaction is verified continuously. It offers the first systematic treatment of zero-trust for multi-LLM edge systems, combining a threat analysis (jailbreaks, prompt-injection propagation, consensus manipulation, cross-context data leakage), a unified architectural framework, and a taxonomy of mechanisms split into model-level (identity, context-aware access control, stateless and ephemeral LLMs) and system-level (proactive maintenance, blockchain, micro-segmentation, continuous monitoring). If the claim holds, securing edge AI becomes a systems-engineering problem of continuous verification rather than hardening a boundary.

What carries the argument

The central object is the zero-trust multi-LLM framework itself, which the survey builds following the NIST SP 800-207 standard (reference [15] in the paper) and organizes around four principles: explicit verification, least privilege, continuous monitoring, and micro-segmentation. Its load-bearing components are: cryptographic identity and continuous authentication for every LLM; a cloud LLM that serves as policy engine and the sole gateway for inter-LLM communications; context-aware, least-privilege access control; user-input checking and multi-layer output verification; and behavioral auditing with anomaly detection. The model-level versus system-level taxonomy is what carries the literat

What would settle it

Compromise, or faithfully simulate compromising, the cloud LLM in the proposed framework and show that the attacker can then intercept or alter inter-LLM traffic despite the identity, verification, and monitoring machinery; alternatively, run the framework on realistic edge hardware and show that continuous authentication and monitoring break the latency or energy budget of a representative autonomous-driving or smart-health workload.

Watch

Extended reading notes

Core claim

The paper's central claim is that the trust model underlying multi-LLM edge systems must be inverted. Instead of implicitly trusting whatever sits inside a security boundary, the system should treat every user input, every LLM output, every inter-LLM message, and every tool call as potentially hostile and verify it before it acts. The survey grounds this in four zero-trust principles — explicit verification, least privilege, continuous monitoring, and micro-segmentation — and presents a unified framework, following the NIST SP 800-207 standard cited in the paper, in which a cloud LLM acts as policy engine and sole inter-LLM communication gateway, every LLM holds a cryptographic identity, acc

Load-bearing premise

The framework makes the cloud LLM the policy engine and the only gateway for all inter-LLM messages, but it never explains how that single controller itself earns trust — if it is compromised, every 'zero-trust' guarantee routes through the attacker.

Editorial extensions

If this is right

  • Edge AI deployments get a concrete blueprint: every LLM, user, and tool carries a cryptographic identity, permissions are granted per task and revoked when the task ends, and all inter-LLM traffic passes through a policy-enforcing gateway.
  • The taxonomy lets practitioners map defenses to principles — identity and access-control mechanisms implement explicit verification and least privilege, while stateless or ephemeral LLM management and micro-segmentation implement assume-breach containment.
  • If the framework is adopted, the attacks the paper documents — prompt-injection chains that cascade between LLMs, consensus manipulation by Byzantine agents, and cross-context data leakage — become containable and detectable rather than fatal.
  • Partial adoption is an explicit failure mode: the paper warns that doing only identity verification without continuous monitoring lets attackers persist after an initial compromise (Section 4.3).
  • The paper's own comparison (Table 3) concedes zero-trust carries high operational overhead from continuous authentication, real-time monitoring, and dynamic permission management, so adoption is a security-versus-cost trade, not a free win.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • The paper leaves implicit how the framework's own controller earns trust: the cloud LLM both writes policy and sits on every communication path, so its compromise would route every 'zero-trust' guarantee through the attacker. A natural extension is attesting the policy engine itself, or replacing it with a quorum of mutually verifying controllers.
  • The survey does not quantify the operational cost of continuous verification on resource-constrained edge devices; benchmarking that overhead (latency, energy, bandwidth) in a real testbed would settle whether the blueprint is deployable.
  • A direct empirical test of the paper's motivation is available: compare how far a malicious prompt payload propagates in a perimeter-defended multi-LLM system versus the same system with micro-segmentation and gateway enforcement.
Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 5 minor

Summary. The paper presents a survey of security threats in multi-LLM systems deployed for edge general intelligence (EGI) and argues that zero-trust principles ('never trust, always verify') are the appropriate security paradigm for such systems. It systematically reviews intra-LLM and inter-LLM vulnerabilities, critiques perimeter-based defenses, and proposes a reference framework inspired by NIST SP 800-207 in which mobile-edge LLMs are authenticated, authorized, and monitored under the control of a cloud LLM acting as policy engine and communication gateway. The survey then categorizes recent zero-trust mechanisms into model-level approaches (identity, access control, stateless/ephemeral management) and system-level approaches (proactive maintenance, blockchain/distributed management, micro-segmentation, monitoring). The paper claims to be the first systematic treatment of zero-trust for multi-LLM systems and concludes with research directions.

Significance. If the framework's architectural inconsistency is resolved, the survey would be a useful reference: it compiles a broad and current bibliography, provides a clear threat taxonomy, and makes a reasonable case that perimeter-based defenses are insufficient for collaborative LLM systems. The strengths are the explicit comparison of traditional and zero-trust approaches (Table 3), the organization of scattered defenses into coherent categories, and the use of NIST SP 800-207 as a concrete anchor. The paper does not provide implementations or quantitative evaluations, which is acceptable for a survey, but the proposed framework is more than a summary: it is a prescriptive architecture that is claimed to satisfy zero-trust properties. That claim is currently not supported because the framework centralizes trust in the cloud LLM.

major comments (3)
  1. [§4.1.2, §4.1.4, §4.2, vs. §3.2.4] The framework's cloud LLM is simultaneously the policy engine (§4.1.2), the sole inter-LLM communication gateway (§4.1.4), the identity/authentication authority (§4.1.3), and the entity that isolates compromised LLMs during continuous monitoring (§4.2). Under the paper's own 'never trust, always verify' principle and its statement in Table 3 that 'no component and entity should be unconditionally trusted at any time', this component must itself be verified and must not be a single point of failure. The paper does not explain how the cloud LLM earns trust, what attests its integrity, or what happens if it is Byzantine. The paper actually acknowledges in §3.2.4 that a compromised central coordinator can propagate biased plans, suppress valid alternatives, and selectively misinform subordinates — exactly the role the cloud LLM plays. The framework therefore does not eliminate implicit trust
  2. [§4.1.4] The text states: 'transmitted content is encrypted using the sender LLM’s public key and decrypted at the receiver using private keys'. This is cryptographically incorrect. For confidentiality, the sender should encrypt with the receiver's public key so that the receiver can decrypt with its own private key; using the sender's public key would only permit verification of a signature, not confidential transmission. The framework's communication security is a core zero-trust mechanism, so this specification error should be corrected and the surrounding text checked for similar confusions between encipherment and signing.
  3. [§5.3.1] The paper categorizes PagedAttention [111] and vAttention [112] as mechanisms for 'stateless LLM management' that provide security isolation: it claims that PagedAttention implements 'process-like isolation' with 'complete isolation between requests' and that vAttention provides 'hardware-level isolation' in protected address spaces. These systems are primarily performance-oriented memory-management techniques for LLM serving; their isolation is about memory efficiency and request scheduling, not adversarial security. Presenting them as zero-trust security mechanisms overstates their guarantees and weakens the credibility of the model-level taxonomy. The survey should either add a clear qualifier that these are enabling techniques whose security properties are not established against malicious tenants, or replace them with systems explicitly designed for security isolation.
minor comments (5)
  1. [§4.2] The text says 'Four major steps are included', but the enumerated workflow contains five bullets (Startup and LLM Authentication; Prompt Understanding; Collaborative Decision Planning; Policy-Governed Plan Execution; Continuous Monitoring and Threat Mitigation). Adjust the count or restructure the list.
  2. [§1.1, footnote 2] The concrete performance numbers ('reducing response latency by up to 50% and operational costs by 30%') are taken from an AWS marketing blog. For a survey, such figures should be labeled as vendor-reported anecdotal evidence or replaced with peer-reviewed measurements, since they are otherwise presented as established facts.
  3. [References] There are duplicate entries: [6] and [61] are the same paper (Xu et al., 'A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models'), and [21] and [94] are the same paper (Gan et al., 'Navigating the Risks...'). Please consolidate and renumber.
  4. [Fig. 4, lower panel] The label 'Cloud LLM servers as the communication gateway' contains a typo; 'servers' should be 'serves'. Also, the figure legend says 'Workflow' but the lower panel is not clearly aligned with the five workflow bullets in §4.2.
  5. [§6.2] The discussion of MPC and ZKP appears under 'Blockchain and Distributed Management', but these techniques are not blockchain-specific. Consider broadening the section heading or providing a transition sentence explaining why MPC/ZKP are included here rather than under cryptographic mechanisms.

Circularity Check

0 steps flagged · score 2.0 of 10

No circular derivation found; the survey's framework is anchored to an external standard, and the flagged cloud-LLM trust anomaly is a design-consistency risk, not a circular reduction.

full rationale

This is a survey with no fitted parameters, no derived predictions, and no equations that reduce to their own inputs. The zero-trust multi-LLM framework is explicitly anchored to NIST SP 800-207 [15], an external standard, and the surveyed mechanisms are cited from independent, mostly non-overlapping prior work. Self-citations such as [24] (Luo et al., multi-LLM/EGI survey), [132] (LightChain), and [136] (trustworthy multi-LLM network) are used as background pointers and are not load-bearing: none is invoked as a uniqueness theorem, none forbids alternative designs, and none is the sole support for the central framework. The 'first systematic treatment' claim is a scope/novelty claim, not a mathematical derivation. The strongest flagged issue is architectural consistency rather than circularity: Section 4.1.2 states 'cloud LLMs function as policy engines that establish and enforce security protocols throughout the distributed multi-LLM network,' and Section 4.1.4 states 'all inter-LLM communications within the multi-LLM system are channeled through a secure gateway deployed on the cloud LLM.' This implicitly trusts a centralized component under the paper's own 'never trust, always verify' principle, and Section 3.2.4 acknowledges that a compromised coordinator can propagate biased plans and suppress alternatives. That is a substantive security-design limitation and a correctness risk, but it does not make the survey's claims reduce to their inputs by construction, so the circularity score remains low.

Assumptions & free parameters 0 free parameters · 4 assumptions · 0 invented entities

The survey's central claim depends on the transferability of zero-trust from network security to LLM systems, which is asserted rather than demonstrated. It also assumes a cloud LLM can act as a trusted policy engine, creating a potential single point of failure that conflicts with the zero-trust premise. No free parameters are fitted, and no new entities are introduced.

assumptions (4)
  • domain assumption Zero-trust principles (never trust, always verify) apply coherently to LLM-based multi-agent systems.
    Introduced in Section 2.3.1 for network security, then asserted in Section 3.4 to transfer to multi-LLM systems without empirical demonstration. This is the load-bearing premise of the survey.
  • domain assumption Multi-LLM systems are the key enabler of Edge General Intelligence.
    Stated in Section 2.2.1 as the basis for the survey, citing earlier surveys [4,5]. This framing justifies the focus on multi-LLM deployments at the edge.
  • ad hoc to paper The cloud LLM can serve as the policy engine and communication gateway while remaining trustworthy.
    Sections 4.1.2 and 4.1.4 designate the cloud LLM as a centralized policy engine and gateway. This creates a trusted component whose compromise would undermine zero-trust, and the paper does not resolve this tension.
  • domain assumption The enumerated threat categories (jailbreaks, prompt injection, consensus manipulation, etc.) are real and material in EGI deployments.
    Section 3 lists threats with supporting examples from the literature, but their severity in actual edge deployments is assumed rather than measured in this paper.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey." pith.science (2026). https://pith.science/paper/O6NHSHXB

@misc{pith2026250819870,
  author       = {Pith},
  title        = {Pith review of: Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/O6NHSHXB}},
  note         = {Machine review of arXiv:2508.19870}
}
read the original abstract

Agentification serves as a critical enabler of Edge General Intelligence (EGI), transforming massive edge devices into cognitive agents through integrating Large Language Models (LLMs) and perception, reasoning, and acting modules. These agents collaborate across heterogeneous edge infrastructures, forming multi-LLM agentic AI systems that leverage collective intelligence and specialized capabilities to tackle complex, multi-step tasks. However, the collaborative nature of multi-LLM systems introduces critical security vulnerabilities, including insecure inter-LLM communications, expanded attack surfaces, and cross-domain data leakage that traditional perimeter-based security cannot adequately address. To this end, this survey introduces zero-trust security of multi-LLM in EGI, a paradigmatic shift following the ``never trust, always verify'' principle. We begin by systematically analyzing the security risks in multi-LLM systems within EGI contexts. Subsequently, we present the vision of a zero-trust multi-LLM framework in EGI. We then survey key technical progress to facilitate zero-trust multi-LLM systems in EGI. Particularly, we categorize zero-trust security mechanisms into model- and system-level approaches. The former and latter include strong identification, context-aware access control, etc., and proactive maintenance, blockchain-based management, etc., respectively. Finally, we identify critical research directions. This survey serves as the first systematic treatment of zero-trust applied to multi-LLM systems, providing both theoretical foundations and practical strategies.

Figures

Figures reproduced from arXiv: 2508.19870 by the authors.

Figure 1
Figure 1. The structure of the paper. architectural design and operational workflows. Sections 5 and 6 present an extensive review of zero-trust security mechanisms. The identification and discussion of critical future research directions are presented in Section 7. Finally, Section 8 concludes this survey. 2 FUNDAMENTALS AND PRELIMINARIES 2.1 Multi-LLM Systems LLMs represent a revolutionary advancement in AI, evolving from e… view at source ↗
Figure 2
Figure 2. Background and preliminaries. (left): The mechanisms of multi-LLM systems. (middle): The vision of [PITH_FULL_IMAGE:figures/full_fig_p007_2.png] view at source ↗
Figure 3
Figure 3. The representative perimeter-based security defenses for multi-LLM systems. We can observe that [PITH_FULL_IMAGE:figures/full_fig_p013_3.png] view at source ↗
Figures from the paper (2 more)
Figure 4
Figure 4. Figure 4: The vision of zero-trust multi-LLM in EGI. The upper part illustrates a scenario of autonomous driving, [PITH_FULL_IMAGE:figures/full_fig_p017_4.png]
Figure 5
Figure 5. Figure 5: (left): The illustration of Guardian [130]. It analyzes the collaboration pattern of multiple LLMs to detect potential risks and make proactive maintenance. (right): The illustration of SentinelAgent [131]. It monitors all logs and behaviors in multi-LLM systems and ut…

Discussion (0). Sign in to comment.

Forward citations

Cited by 2 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. Agentic IoT: Architectures, Applications, and Challenges Toward the Internet of Agents

    cs.AI 2026-07 conditional novelty 5.0 of 10

    Agentic IoT is formalized as a cognitive IoT paradigm that embeds LLM-driven agents with perception-reasoning-planning-action-learning loops into cyber-physical systems across the device-edge-fog-cloud continuum.

  2. Cost and Accuracy of Long-Term Memory in Distributed Multi-Agent Systems Based on Large Language Models

    cs.IR 2026-01 reject novelty 5.0 of 10

    A two-framework testbed comparison claims mem0 is Pareto-optimal over Graphiti for distributed LLM agents because its lower cost is paired with accuracy that is not significantly different.

Reference graph

Works this paper leans on

149 extracted references · 35 canonical work pages · cited by 2 Pith papers

  1. [16]

    Xinye Cao et al. 2025. Exploring LLM-Based Multi-Agent Situation Awareness for Zero-Trust Space-Air-Ground Integrated Network. IEEE Journal on Selected Areas in Communications 43, 6 (2025), 2230–2247

    2025

  2. [24]

    Haoxiang Luo et al. 2025. Toward Edge General Intelligence with Multiple-Large Language Model (Multi-LLM): Architecture, Trust, and Orchestration. ArXiv preprint: ArXiv:2507.00672 (2025)

    arXiv 2025

  3. [111]

    Woosuk Kwon et al. 2023. Efficient Memory Management for Large Language Model Serving with PagedAttention. In Proc. SOSP. 1–16

    2023

  4. [112]

    Ramya Prabhu, Ajay Nayak, Jayashree Mohan, Ramachandran Ramjee, and Ashish Panwar. 2025. vAttention: Dynamic Memory Management for Serving LLMs without PagedAttention. In Proc. ASPLOS. 1–18

    work page 2025

  5. [1]

    Yingxuan Yang et al. 2024. LLM-based Multi-Agent Systems: Techniques and Business Perspectives. ArXiv preprint: ArXiv:2411.14033 (2024)

    arXiv 2024

  6. [2]

    Deepak Bhaskar Acharya, Karthigeyan Kuppan, and B. Divya. 2025. Agentic AI: Autonomous Intelligence for Complex Goals—A Comprehensive Survey. IEEE Access 13 (2025), 18912–18936

    2025

  7. [3]

    Ahmet Gunduz, Kamer Ali Yuksel, and Hassan Sawaf. 2025. MediaMind: Revolutionizing Media Monitoring using Agentification. ArXiv preprint: ArXiv:2502.12745 (2025)

    work page Pith review arXiv 2025

  8. [4]

    Handi Chen et al. 2024. Towards Edge General Intelligence via Large Language Models: Opportunities and Challenges. ArXiv preprint: ArXiv:2410.18125 (2024)

    arXiv 2024

Show all 149 references
  1. [5]

    Le He et al. 2025. The Road Toward General Edge Intelligence: Standing on the Shoulders of Foundation Models. IEEE Communications Magazine (2025), 1–7

    2025

  2. [6]

    Zihao Xu, Yi Liu, Gelei Deng, Yuekang Li, and Stjepan Picek. 2024. A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models. In Proc. ACL Findings. 7432–7449

    2024

  3. [7]

    Yi Liu et al. 2023. Prompt Injection attack against LLM-integrated Applications. ArXiv preprint: ArXiv:2306.05499 (2023)

    2023 arXiv

  4. [8]

    Zhaorun Chen, Zhen Xiang, Chaowei Xiao, Dawn Song, and Bo Li. 2024. AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases. In Proc. NeurIPS. 1–29

    2024

  5. [9]

    Ronny Ko et al. 2025. Seven Security Challenges That Must be Solved in Cross-domain Multi-agent LLM Systems. ArXiv preprint: ArXiv:2505.23847 (2025)

    2025 arXiv

  6. [10]

    Lei Yu, Virginie Do, Karen Hambardzumyan, and Nicola Cancedda. 2024. Robust LLM safeguarding via refusal feature adversarial training. ArXiv preprint: ArXiv:2409.20089 (2024)

    2024 arXiv

  7. [11]

    Zachary Charles et al. 2024. Fine-Tuning Large Language Models with User-Level Differential Privacy. ArXiv preprint: ArXiv:2407.07737 (2024)

    2024 arXiv

  8. [12]

    Wei Yu et al. 2022. TEE based Cross-silo Trustworthy Federated Learning Infrastructure. In Proc. IJCAI

    2022

  9. [13]

    Yifan Zeng et al. 2024. AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks. In Proc. NeurIPS

    2024

  10. [14]

    OpenAI et al. 2023. GPT-4 Technical Report. arXiv preprint arXiv:2303.08774 (2023)

    2023 arXiv

  11. [15]

    [n. d.]. NIST Zero trust standard. 2025. https://www.nist.gov/publications/zero-trust-architecture

    2025

  12. [17]

    Alexandre Poirrier, Laurent Cailleux, and Thomas Heide Clausen. 2025. Is Trust Misplaced? A Zero-Trust Survey. Proc. IEEE 113, 1 (2025), 5–39. ACM Comput. Surv., Vol. 9, No. 9, Article 35. Publication date: September 2025. Secure Multi-LLM Agentic AI and Agentification for Edg...

    2025

  13. [18]

    Hadi Amini, and Yanzhao Wu

    Badhan Chandra Das, M. Hadi Amini, and Yanzhao Wu. 2025. Security and Privacy Challenges of Large Language Models: A Survey. ACM Computing Survey 57, 6 (Feb. 2025), 1–39

    2025

  14. [19]

    Francisco Aguilera-Martínez and Fernando Berzal. 2025. LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures. ArXiv preprint: ArXiv:2505.01177 (2025)

    2025 arXiv

  15. [20]

    Othmane Friha, Mohamed Amine Ferrag, Burak Kantarci, Burak Cakmak, Arda Ozgun, and Nassira Ghoualmi- Zine. 2024. LLM-Based Edge Intelligence: A Comprehensive Survey on Architectures, Applications, Security and Trustworthiness. IEEE Open Journal of the Communications Society 5 ...

    2024

  16. [22]

    Yang Liu et al. 2024. Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models’ Alignment. ArXiv preprint: ArXiv: 2308.05374 (2024)

    2024 arXiv

  17. [23]

    Dezhang Kong et al. 2025. A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures. ArXiv preprint: ArXiv:2506.19676 (2025)

    2025

  18. [25]

    Pierre Peigne et al. 2024. Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems. In Proc. AAAI. 27573–27581

    2024

  19. [26]

    Shih-Han Chan. 2025. Encrypted Prompt: Securing LLM Applications Against Unauthorized Actions. ArXiv preprint: ArXiv:2503.23250 (2025)

    2025 arXiv

  20. [27]

    Zitong Shi et al . 2025. Privacy-Enhancing Paradigms within Federated Multi-Agent Systems. ArXiv preprint: ArXiv:2503.08175 (2025)

    2025 arXiv

  21. [28]

    Peng Xiao, Shunkun Yang, Hailin Wang, Zhenhong Zhang, and Chunsheng Zou. 2025. Privacy-preserving revocable access control for LLM-driven electrical distributed systems. Peer-to-Peer Networking and Applications 18, 148 (2025), 1–12

    2025

  22. [29]

    Usama Arshad and Zahid Halim. 2025. BlockLLM: A futuristic LLM-based decentralized vehicular network architecture for secure communications. Computers and Electrical Engineering 123 (Jan. 2025), 1–39

    2025

  23. [30]

    Sizhe Chen, Yizhu Wang, Nicholas Carlini, Chawin Sitawarin, and David Wagner. 2025. Defending Against Prompt Injection With a Few DefensiveTokens. ArXiv preprint: ArXiv:2507.07974 (2025)

    2025 arXiv

  24. [32]

    Zan-Kai Chong, Hiroyuki Ohsaki, and Bryan Ng. 2025. LLM-Net: Democratizing LLMs-as-a-Service through Blockchain-based Expert Networks. ArXiv preprint: ArXiv:2501.07288 (2025)

    2025 arXiv

  25. [33]

    Jing Wang, Xue Yuan, Yingjie Xu, Yudi Zhang, and Guowen Xu. 2024. An Efficient Multiparty Threshold ECDSA Protocol against Malicious Adversaries for Blockchain-Based LLMs. IET Information Security 2024 (2024), 1–12

    2024

  26. [34]

    [n. d.]. OpenAI ChatGPT. 2025. https://openai.com/index/chatgpt/

    2025

  27. [35]

    Alexander Kirillov et al. 2023. Segment Anything. In Proc. ICCV. 4015–4026

    2023

  28. [36]

    Qingyu Wu et al. 2024. AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversations. In Proc. COLM. 1–46

    2024

  29. [37]

    Sirui Hong et al. 2024. MetaGPT: Meta Programming for A Multi-Agent Collaborative Framework. In Proc. ICLR. 1–29

    2024

  30. [38]

    Tenenbaum, and Igor Mordatch

    Yilun Du, Shuang Li, Antonio Torralba, Joshua B. Tenenbaum, and Igor Mordatch. 2024. Improving factuality and reasoning in language models through multiagent debate. In Proc. ICML. 11733 – 11763

    2024

  31. [39]

    Xinyi Li, Sai Wang, Siqi Zeng, Yu Wu, and Yi Yang. 2024. A survey on LLM-based multi-agent systems: workflow, infrastructure, and challenges. Vicinagearth 1, 9 (2024), 1–43

    2024

  32. [40]

    Guibin Zhang et al . 2025. G-Designer: Architecting Multi-Agent Communication Topologies via Graph Neural Networks. In Proc. ICLR. 1–12

    2025

  33. [41]

    Ehud Karpas et al. 2022. MRKL systems: A modular, neuro-symbolic architecture that combines large language models, external knowledge sources and discrete reasoning. ArXiv preprint: ArXiv:2205.00445 (2022)

    2022 arXiv

  34. [42]

    Abul Ehtesham, Aditi Singh, Gaurav Kumar Gupta, and Saket Kumar. 2025. A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP). ArXiv preprint: ArXiv:2505.02...

    2025 arXiv

  35. [43]

    Yu Du, Jun Li, Long Shi, Tingting Liu, Feng Shu, and Zhu Han. 2022. Two-Tier Matching Game in Small Cell Networks for Mobile Edge Computing. IEEE Transactions on Services Computing 15, 1 (2022), 254–265

    2022

  36. [44]

    Yung-Yao Chen, Sin-Ye Jhong, Shao-Kai Tu, Yu-Hsiu Lin, and Yi-Chen Wu. 2024. Autonomous Smart-Edge Fault Diagnostics via Edge-Cloud-Orchestrated Collaborative Computing for Infrared Electrical Equipment Images. IEEE Sensors Journal 24, 15 (2024), 24630–24648. ACM Comput. Surv....

    2024

  37. [45]

    Sébastien Bubeck et al. 2023. Sparks of Artificial General Intelligence: Early experiments with GPT-4. ArXiv preprint: ArXiv:2303.12712 (2023)

    2023 arXiv

  38. [46]

    Jan Clusmann et al. 2023. The future landscape of large language models in medicine. Communications Medcine 3, 141 (2023), 1–8

    2023

  39. [47]

    Senkang Hu, Zhengru Fang, Zihan Fang, Yiqin Deng, Xianhao Chen, and Yuguang Fang. 2025. AgentsCoDriver: Large Language Model Empowered Collaborative Driving with Lifelong Learning. ArXiv preprint: ArXiv:2404.06345 (2025)

    2025 arXiv

  40. [48]

    Xiaozhi Deng, Tengteng Ma, Haobin Li, and Mingxin Lu. 2024. Federated Large Language Models for Smart Grid: A Communication Efficient LoRA Approach. In Proc. ICCASIT. 1369–1374

    2024

  41. [49]

    Hrishikesh Joshi. 2025. Emerging Technologies Driving Zero Trust Maturity Across Industries. IEEE Open Journal of the Computer Society 6 (2025), 25–36

    2025

  42. [50]

    Khowaja, Parus Khuwaja, Kapal Dev, Keshav Singh, Xingwang Li, Nikolaos Bartzoudis, and Ciprian R

    Sunder A. Khowaja, Parus Khuwaja, Kapal Dev, Keshav Singh, Xingwang Li, Nikolaos Bartzoudis, and Ciprian R. Comsa. 2025. Block Encryption LAyer (BELA): Zero-Trust Defense Against Model Inversion Attacks for Federated Learning in 5G/6G Systems. IEEE Open Journal of the Communic...

    2025

  43. [51]

    Qingxuan Wang and Ding Wang. 2023. Understanding Failures in Security Proofs of Multi-Factor Authentication for Mobile Devices. IEEE Transactions on Information Forensics and Security 18 (2023), 597–612

    2023

  44. [52]

    Wentao Jing, Linning Peng, Hua Fu, and Aiqun Hu. 2024. An Authentication Mechanism Based on Zero Trust With Radio Frequency Fingerprint for Internet of Things Networks. IEEE Internet of Things Journal 11, 13 (2024), 23683–23698

    2024

  45. [53]

    Sungmin Hong, Lei Xu, Jianwei Huang, Hongda Li, Hongxin Hu, and Guofei Gu. 2023. SysFlow: Toward a Pro- grammable Zero Trust Framework for System Security. IEEE Transactions on Information Forensics and Security 18 (2023), 2794–2809

    2023

  46. [54]

    Lan Zhou, Vijay Varadharajan, and Michael Hitchens. 2013. Achieving Secure Role-Based Access Control on Encrypted Data in Cloud Storage. IEEE Transactions on Information Forensics and Security 8, 12 (2013), 1947–1960

    2013

  47. [55]

    Marcela Tuler De Oliveira, Lúcio Henrik Amorim Reis, Yiannis Verginadis, Diogo Menezes Ferrazani Mattos, and Sílvia Delgado Olabarriaga. 2022. SmartAccess: Attribute-Based Access Control System for Medical Records Based on Smart Contracts. IEEE Access 10 (2022), 117836–117854

    2022

  48. [56]

    Pejman Najafi, Daniel Koehler, Feng Cheng, and Christoph Meinel. 2021. NLP-based Entity Behavior Analytics for Malware Detection. In Proc. IPCCC. 1–5

    2021

  49. [57]

    Manadhata, and Loai Zomlot

    Sandeep Bhatt, Pratyusa K. Manadhata, and Loai Zomlot. 2014. The Operational Role of Security Information and Event Management Systems. IEEE Security & Privacy 12, 5 (2014), 35–41

    2014

  50. [58]

    Eranga Bandara, Xueping Liang, Sachin Shetty, Ravi Mukkamala, Abdul Rahman, and Ng Wee Keong. 2022. Skunk — A Blockchain and Zero Trust Security Enabled Federated Learning Platform for 5G/6G Network Slicing. In Proc. SECON. 109–117

    2022

  51. [59]

    Liv d’Aliberti, Evan Gronberg, and Joseph Kovba. 2024. Privacy-Enhancing Technologies for Artificial Intelligence- Enabled Systems. In Proc. IWSPA

    2024

  52. [60]

    Rui Zhao, Ziguo Chen, Yuze Fan, Yun Li, and Fei Gao. 2024. Towards Robust Decision-Making for Autonomous Highway Driving Based on Safe Reinforcement Learning. Sensors 24, 13 (2024)

    2024

  53. [61]

    Zihao Xu, Yi Liu, Gelei Deng, Yuekang Li, and Stjepan Picek. 2024. A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models. In Proc. ACL. 7432–7449

    2024

  54. [62]

    Zeyi Liao and Huan Sun. 2024. AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs. In Proc. COLM. 1–14

    2024

  55. [63]

    Richard Fang, Rohan Bindu, Akul Gupta, and Daniel Kang. 2024. LLM Agents can Autonomously Exploit One-day Vulnerabilities. ArXiv preprint: ArXiv:2404.08144 (2024)

    2024 arXiv

  56. [64]

    Nicholas Carlini et al . 2021. Extracting Training Data from Large Language Models. In Proc. USENIX Security . 2633–2650

    2021

  57. [65]

    Fatemehsadat Mireshghallah, Kartik Goyal, Archit Uniyal, Taylor Berg-Kirkpatrick, and Reza Shokri. 2022. Quantifying Privacy Risks of Prompting Large Language Models. arXiv preprint arXiv:2210.17012 (2022)

    2022 arXiv

  58. [66]

    Pranab Sahoo, Prabhash Meharia, Akash Ghosh, Sriparna Saha, Vinija Jain, and Aman Chadha. 2024. A Comprehensive Survey of Hallucination in Large Language, Image, Video and Audio Foundation Models. InProc. EMNLP. 11709–11724

    2024

  59. [67]

    Donghyun Lee and Mo Tiwari. 2024. Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems. ArXiv preprint: ArXiv:2410.07283 (2024)

    2024 arXiv

  60. [68]

    Xu Shen et al. 2025. Understanding the Information Propagation Effects of Communication Topologies in LLM-based Multi-Agent Systems. ArXiv preprint: ArXiv:2505.23352 (2025)

    2025 arXiv

  61. [69]

    Rupeng Zhang et al. 2025. From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injection. In Proc. NAACL. 2009–2028

    2025

  62. [70]

    Pengfei He, Yupin Lin, Shen Dong, Han Xu, Yue Xing, and Hui Liu. 2025. Red-Teaming LLM Multi-Agent Systems via Communication Attacks. arXiv preprint arXiv:2502.14847 (2025). ACM Comput. Surv., Vol. 9, No. 9, Article 35. Publication date: September 2025. Secure Multi-LLM Agenti...

    2025 arXiv

  63. [71]

    Yuyang Zhang, Kangjie Chen, Jiaxin Gao, Ronghao Cui, Run Wang, Lina Wang, and Tianwei Zhang. 2024. Towards Action Hijacking of Large Language Model-based Agent. arXiv preprint arXiv:2412.10807 (2024)

    2024 arXiv

  64. [72]

    Gurusha Juneja, Alon Albalak, Wenyue Hua, and William Yang Wang. 2025. MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation. ArXiv preprint: ArXiv:2506.20737 (2025)

    2025 arXiv

  65. [73]

    Haibo Jin, Ruoxi Chen, Peiyan Zhang, Andy Zhou, Yang Zhang, and Haohan Wang. 2025. GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of LLMs. ArXiv preprint: ArXiv:2402.03299 (2025)

    2025

  66. [74]

    Marcin Chrapek, Anjo Vahldiek-Oberwagner, Marcin Spoczynski, Scott Constable, Mona Vij, and Torsten Hoefler

  67. [75]

    Assaf Namer, Prashant Kulkarni, Erik Jeansson, Brandon Maltzman, and Hauke Vagts. 2025. Automatically Detecting Expensive Prompts and Configuring Firewall Rules to Mitigate Denial of Service Attacks on Large Language Models. https://www.tdcommons.org/dpubs_series/6642/ (2025)

    2025

  68. [76]

    Sophie Xhonneux, Alessandro Sordoni, Stephan Günnemann, Gauthier Gidel, and Leo Schwinn. 2025. Efficient adversarial training in LLMs with continuous attacks. In Proc. NeurIPS. 1502 – 1530

    2025

  69. [77]

    Dazhen Deng, Chuhan Zhang, Huawei Zheng, Yuwen Pu, Shouling Ji, and Yingcai Wu. 2025. AdversaFlow: Visual Red Teaming for Large Language Models with Multi-Level Adversarial Flow. IEEE Transactions on Visualization and Computer Graphics 31, 1 (2025), 492–502

    2025

  70. [78]

    Rouzbeh Behnia, Mohammadreza Reza Ebrahimi, Jason Pacheco, and Balaji Padmanabhan. 2022. EW-Tune: A Framework for Privately Fine-Tuning Large Language Models with Differential Privacy. InProc. ICDMW. 560–566

    2022

  71. [79]

    Juntao Dai et al. 2024. Safe RLHF: Safe Reinforcement Learning from Human Feedback. In Proc. ICML. 1–28

    2024

  72. [80]

    Zhendan Sun and Ruibin Zhao. 2025. LLM Security Alignment Framework Design Based on Personal Preference. In Proc. AIFE. 6–11

    2025

  73. [81]

    Petr Spelda and Vit Stritecky. 2025. Security practices in AI development. AI & Society (2025), 1–11

    2025

  74. [82]

    Mansi Phute, Alec Helbling, Matthew Daniel Hull, ShengYun Peng, Sebastian Szyller, Cory Cornelius, and Duen Horng Chau. 2024. LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked. In Proc. ICLR. 1–6

    2024

  75. [83]

    Ben Dong and Qian Wang. 2025. Evaluating the Performance of the DeepSeek Model in Confidential Computing Environment. ArXiv preprint: ArXiv:2502.11347 (2025)

    2025 arXiv

  76. [84]

    Jianchang Su and Wei Zhang. 2025. Runtime Attestation for Secure LLM Serving in Cloud-Native Trusted Execution Environments. In Proc. ICSA. 1–5

    2025

  77. [85]

    Qinfeng Li et al. 2024. CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment. ArXiv preprint: ArXiv:2410.13903 (2024)

    2024 arXiv

  78. [86]

    Zechao Lin, Sisi Zhang, Xingbin Wang, Yulan Su, Yan Wang, Rui Hou, and Dan Meng. 2025. LoRATEE: A Secure and Efficient Inference Framework for Multi-Tenant LoRA LLMs Based on TEE. In Proc. ICASSP. 1–5

    2025

  79. [87]

    Debdeep Sanyal, Umakanta Maharana, Yash Sinha, Hong Ming Tan, Shirish Karande, Mohan Kankanhalli, and Murari Mandal. 2025. OrgAccess: A Benchmark for Role Based Access Control in Organization Scale LLMs. ArXiv preprint: ArXiv:2505.19165 (2025)

    2025 arXiv

  80. [88]

    Bin Huang et al. 2024. FirewaLLM: A Portable Data Protection and Recovery Framework for LLM Services. In Proc. DMBD. 16–30

    2024

  81. [89]

    Tsau Young T. Y. Lin and Pierre Vachon. 2017. Secure information flow and file movements: A topological theory of discretionary access controls. In Proc. Big Data. 1821–1829

    2017

  82. [90]

    Hui Lu, Xiaojiang Du, Dawei Hu, Shen Su, and Zhihong Tian. 2025. BPFGuard: Multi-Granularity Container Runtime Mandatory Access Control. IEEE Transactions on Cloud Computing 13, 2 (2025), 629–640

    2025

  83. [91]

    Tianneng Shi, Jingxuan He, Zhun Wang, Linyu Wu, Hongwei Li, Wenbo Guo, and Dawn Song. 2025. Progent: Programmable Privilege Control for LLM Agents. ArXiv preprint: ArXiv:2504.11703 (2025)

    2025 arXiv

  84. [93]

    Yidou Chen Yixin Jiang Cong Wang Zhan Qin Hongwei Yao, Haoran Shi. 2025. ControlNET: A Firewall for RAG-based LLM System. arXiv preprint arXiv:2504.09593 (2025)

    2025 arXiv

  85. [94]

    Yuyou Gan et al. 2024. Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents. arXiv preprint arXiv:2411.09523 (2024)

    2024 arXiv

  86. [95]

    Huihao Jing et al . 2025. MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol. arXiv preprint arXiv:2505.14590 (2025)

    2025

  87. [96]

    Wayne Xin Zhao et al. 2025. A Survey of Large Language Models. ArXiv preprint: ArXiv:2303.18223 (2025)

    2025 arXiv

  88. [97]

    Bei Chen et al. 2024. BlockAgents: Towards Byzantine-Robust LLM-Based Multi-Agent Coordination via Blockchain. In Proc. ACM Turing A ward Celebration Conference. 187–192. ACM Comput. Surv., Vol. 9, No. 9, Article 35. Publication date: September 2025. 35:34 Y. Liu et al

    2024

  89. [98]

    Yuan Yao, Bin Xiao, Gang Yang, Yujiao Hu, Liang Wang, and Xingshe Zhou. 2019. Power Control Identification: A Novel Sybil Attack Detection Scheme in VANETs Using RSSI. IEEE Journal on Selected Areas in Communications 37, 11 (2019), 2588–2602

    2019

  90. [99]

    Qianlong Sun, Guoshun Nan, Tianyi Li, Huici Wu, Zhou Zhong, and Xiaofeng Tao. 2025. A Secure Digital Signature Scheme for Deep Learning-Based Semantic Communication Systems. IEEE Wireless Communications Letters 14, 4 (2025), 1119–1123

    2025

  91. [100]

    Chenxin Zhang, Jin He, Baixiang Fan, Yaqiang Gong, Shuo Li, Bo Yin, and Yongfeng Lin. 2022. Tag-Based Trust Evaluation In Zero Trust Architecture. In Proc. IAECST. 772–776

    2022

  92. [101]

    Suresh Thangakrishnan, T

    Senthil Murugan Nagarajan, Ganesh Gopal Devarajan, M. Suresh Thangakrishnan, T. V. Ramana, Ali Kashif Bashir, and Ahmad Ali AlZubi. 2024. Artificial Intelligence-Based Zero Trust Security Approach for Consumer Industry. IEEE Transactions on Consumer Electronics 70, 3 (2024), 5411–5418

    2024

  93. [102]

    He Fang, Yongxu Zhu, Yan Zhang, and Xianbin Wang. 2024. Decentralized Edge Collaboration for Seamless Handover Authentication in Zero-Trust IoV. IEEE Transactions on Wireless Communications 23, 8 (2024), 8760–8772

    2024

  94. [103]

    Sahar Abdelnabi, Amr Gomaa, Eugene Bagdasarian, Per Ola Kristensson, and Reza Shokri. 2025. Firewalls to Secure Dynamic LLM Agentic Networks. ArXiv preprint: ArXiv:2502.01822 (2025)

    2025 arXiv

  95. [104]

    Samuel Gehman, Suchin Gururangan, Maarten Sap, Yejin Choi, and Noah A. Smith. 2020. RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Models. In Proc. EMNLP. 3356–3369

    2020

  96. [105]

    Yuan Sun, Navid Salami Pargoo, Peter Jin, and Jorge Ortiz. 2024. Optimizing Autonomous Driving for Safety: A Human-Centric Approach with LLM-Enhanced RLHF. In Proc. UbiComp. 76–80

    2024

  97. [106]

    Nurun Nahar, Karl Andersson, Olov Schelén, and Saguna Saguna. 2024. A Survey on Zero Trust Architecture: Applications and Challenges of 6G Networks. IEEE Access 12 (2024), 94753–94764

    2024

  98. [107]

    Fanqin Zhou, Lei Zhang, Zhixiang Yang, and Lei Feng. 2025. Radio Frequency-Enhanced Multi-Factor IoT Device Authentication via Swarm Learning. IEEE Transactions on Network Science and Engineering 12, 4 (2025), 2487–2499

    2025

  99. [108]

    Mouhamed Amine Bouchiha, Quentin Telnoff, Souhail Bakkali, Ronan Champagnat, Mourad Rabah, Mickaël Coustaty, and Yacine Ghamri-Doudane. 2024. LLMChain: Blockchain-Based Reputation System for Sharing and Evaluating Large Language Models. In Proc. COMPSAC. 439–448

    2024

  100. [109]

    Junyuan Mao et al. 2025. AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management. ArXiv preprint: ArXiv:2503.04392 (2025)

    2025 arXiv

  101. [110]

    Alireza Rezazadeh, Zichao Li, Ange Lou, Yuying Zhao, Wei Wei, and Yujia Bao. 2025. Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Control. ArXiv preprint: ArXiv:2505.18279 (2025)

    2025 arXiv

  102. [113]

    Peter Henderson, Eric Mitchell, Christopher Manning, Dan Jurafsky, and Chelsea Finn. 2023. Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Models. In Proc. AIES. 287–296

    2023

  103. [114]

    Yao Fu, Leyang Xue, Yeqi Huang, and Andrei-Octavian Brabete. 2023. ServerlessLLM: low-latency serverless inference for large language models. In Proc. OSDI. 135–153

    2023

  104. [115]

    Holger Kinkelin, Richard von Seck, Christoph Rudolf, and Georg Carle. 2020. Hardening X.509 Certificate Issuance using Distributed Ledger Technology. In Proc. NOMS. 1–6

    2020

  105. [116]

    Patricia Arias-Cabarcos, Christian Krupitzer, and Christian Becker. 2019. A Survey on Adaptive Authentication. ACM Computing Survey 52, 4 (2019), 1–30

    2019

  106. [117]

    Manoj Karkee Christos Emmanouilidis Shaina Raza, Ranjan Sapkota. 2025. TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems. ArXiv preprint: ArXiv:2506.04133 (2025)

    2025

  107. [118]

    Ziye Geng, Yunhua He, Chao Wang, Gang Xu, Ke Xiao, and Shui Yu. 2021. A Blockchain based Privacy-Preserving Reputation Scheme for Cloud Service. In Proc. ICC. 1–6

    2021

  108. [119]

    Mahdi Ghafoorian, Dariush Abbasinezhad-Mood, and Hassan Shakeri. 2019. A Thorough Trust and Reputation Based RBAC Model for Secure Data Storage in the Cloud. IEEE Transactions on Parallel and Distributed Systems 30, 4 (2019), 778–788

    2019

  109. [120]

    Kayes et al

    A. Kayes et al. 2020. A Survey of Context-Aware Access Control Mechanisms for Cloud and Fog Networks: Taxonomy and Open Research Issues. Sensors 20, 9 (2020), 1–34

    2020

  110. [121]

    Cunchen Hu et al. 2024. MemServe: Context Caching for Disaggregated LLM Serving with Elastic Memory Pool. ArXiv preprint: ArXiv:2406.17565 (2024)

    2024 arXiv

  111. [122]

    [n. d.]. CUDA API libraries. 2025. https://docs.nvidia.com/cuda/cuda-driver-api/group__CUDA__VA.html

    2025

  112. [123]

    Minjae Kim, Taehyeong Kwon, Kibeom Shim, and Beonghoon Kim. 2024. Protection of LLM Environment Using Prompt Security. In Proc. ICTC. 1715–1719. ACM Comput. Surv., Vol. 9, No. 9, Article 35. Publication date: September 2025. Secure Multi-LLM Agentic AI and Agentification for E...

    2024

  113. [124]

    Xiaoyu Zhang et al. 2025. JailGuard: A Universal Detection Framework for Prompt-based Attacks on LLM Systems. ACM Transactions on Software Engineering and Methodology (Mar. 2025)

    2025

  114. [125]

    Oleksandr Muliarevych. 2024. Enhancing System Security: LLM-Driven Defense Against Prompt Injection Vulnera- bilities. In Proc. TCSET. 420–423

    2024

  115. [126]

    Abdi, Yuqing Yang, and Lili Qiu

    Yucheng Li, Surin Ahn, Huiqiang Jiang, Amir H. Abdi, Yuqing Yang, and Lili Qiu. 2025. SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression. ArXiv preprint: ArXiv:2506.12707 (2025)

    2025 arXiv

  116. [127]

    Zaibin Zhang et al . 2024. PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety. In Proc. ACL. 15202–15231

    2024

  117. [128]

    Miao Yu et al . 2025. NetSafe: Exploring the Topological Safety of Multi-agent Networks. ArXiv preprint: ArXiv:2410.15686 (2025)

    2025 arXiv

  118. [129]

    Shilong Wang et al. 2025. G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems. In Proc. ACL. 7261–7276

    2025

  119. [130]

    Jialong Zhou et al. 2025. GUARDIAN: Safeguarding LLM Multi-Agent Collaborations with Temporal Graph Modeling. ArXiv preprint: ArXiv:2505.19234 (2025)

    2025

  120. [131]

    Xu He, Di Wu, Yan Zhai, and Kun Sun. 2025. SentinelAgent: Graph-based Anomaly Detection in Multi-Agent Systems. ArXiv preprint: ArXiv:2505.24201 (2025)

    2025 arXiv

  121. [132]

    Yinqiu Liu, Kun Wang, Yun Lin, and Wenyao Xu. 2019. LightChain: A Lightweight Blockchain System for Industrial Internet of Things. IEEE Transactions on Industrial Informatics 15, 6 (2019), 3571–3581

    2019

  122. [133]

    Huawei Huang et al . 2025. BlockEmulator: An Emulator Enabling to Test Blockchain Sharding Protocols. IEEE Transactions on Services Computing 18, 2 (2025), 690–703

    2025

  123. [134]

    Kai Lei, Maoyu Du, Jiyue Huang, and Tong Jin. 2020. Groupchain: Towards a Scalable Public Blockchain in Fog Computing of IoT Services Computing. IEEE Transactions on Services Computing 13, 2 (2020), 252–262

    2020

  124. [135]

    Leon Zhao, Yongfeng Huang, and Yiyang Bian

    Jiewu Leng, Man Zhou, J. Leon Zhao, Yongfeng Huang, and Yiyang Bian. 2022. Blockchain Security: A Survey of Techniques and Research Directions. IEEE Transactions on Services Computing 15, 4 (2022), 2490–2510

    2022

  125. [136]

    Haoxiang Luo et al. 2025. A Trustworthy Multi-LLM Network: Challenges, Solutions, and A Use Case. ArXiv preprint: ArXiv:2505.03196 (2025)

    2025 arXiv

  126. [137]

    Rabimba Karanjai and Weidong Shi. 2024. Trusted LLM Inference on the Edge with Smart Contracts. In Proc. ICBC. 1–7

    2024

  127. [138]

    Zefeng Mo, Zhihao Hou, Ruilin Lai, Xiaoyuan Wu, Junjie Zhou, and Gansen Zhao. 2025. A Blockchain-Based Framework for Crowdsourcing Evaluation of Large Language Models. InBlockchain and Web3.0 Technology Innovation and Application. 62–71

    2025

  128. [139]

    Bei Chen, Gaolei Li, Xi Lin, Zheng Wang, and Jianhua Li. 2024. BlockAgents: Towards Byzantine-Robust LLM-Based Multi-Agent Coordination via Blockchain. In Proc. ACM-TURC. 187–192

    2024

  129. [140]

    Peiming Xu, Huan Xu, Maoqiang Chen, Zhihong Liang, and Wenqian Xu. 2025. Privacy-Preserving Large Language Model in Terms of Secure Computing: A Survey. In Proc. ASENS. 286–294

    2025

  130. [141]

    Wenjie Qu, Yijun Sun, Xuanming Liu, Tao Lu, Yanpei Guo, Kai Chen, and Jiaheng Zhang. 2025. zkGPT: An Efficient Non-interactive Zero-knowledge Proof Framework for LLM Inference. In Proc. USENIX Security. 1–19

    2025

  131. [142]

    Boyi Liu et al . 2025. WiLLM: an Open Framework for LLM Services over Wireless Systems. ArXiv preprint: ArXiv:2506.19030 (2025)

    2025 arXiv

  132. [143]

    Boyi Liu, Jingwen Tong, and Jun Zhang. 2024. Poster Abstract: LLM-Slice: Dedicated Wireless Network Slicing for Large Language Models. In Proc. SenSys. 853–854

    2024

  133. [144]

    Brown et al

    Tom B. Brown et al. 2020. Language Models are Few-Shot Learners. ArXiv preprint: ArXiv:2005.14165 (2020)

    2020 arXiv

  134. [145]

    Melissa Z Pan et al. 2025. Why Do Multiagent Systems Fail?. In Proc. ICLR. 1–40

    2025

  135. [146]

    Xiaowei Huang et al. 2024. A survey of safety and trustworthiness of large language models through the lens of verification and validation. Artificial Intelligence Review 57, 175 (2024), 1–53

    2024

  136. [147]

    Behnaz Elhaminia et al . 2023. Toxicity Prediction in Pelvic Radiotherapy Using Multiple Instance Learning and Cascaded Attention Layers. IEEE Journal of Biomedical and Health Informatics 27, 4 (2023), 1958–1966

    2023

  137. [148]

    Lingzhe Zhang, Yunpeng Zhai, Tong Jia, Xiaosong Huang, Chiming Duan, and Ying Li. 2025. AgentFM: Role-Aware Failure Management for Distributed Databases with LLM-Driven Multi-Agents. In Proc. FSE-IVR. 1–5

    2025

  138. [149]

    Chang and Longling Geng

    Edward Y. Chang and Longling Geng. 2025. SagaLLM: Context Management, Validation, and Transaction Guarantees for Multi-Agent LLM Planning. ArXiv preprint: ArXiv:2505.20824 (2025)

    2025 arXiv

  139. [150]

    Abhinav Tiwari and Hany E. Z. Farag. 2025. Responsible AI Framework for Autonomous Vehicles: Addressing Bias and Fairness Risks. IEEE Access 13 (2025), 58800–58822

    2025

  140. [151]

    Assi, and Ali Ghrayeb

    Nouha Kherraf, Hyame Assem Alameddine, Sanaa Sharafeddine, Chadi M. Assi, and Ali Ghrayeb. 2019. Optimized Provisioning of Edge Computing Resources With Heterogeneous Workload in IoT Networks. IEEE Transactions on Network and Service Management 16, 2 (2019), 459–474. ACM Compu...

    2019

  141. [2024]

    ArXiv preprint: ArXiv:2410.05930 (2024)

    Fortify Your Foundations: Practical Privacy and Security for Foundation Model Deployments In The Cloud. ArXiv preprint: ArXiv:2410.05930 (2024)

    2024 arXiv

Pith tools

Reviewed August 5, 2026 · model on record in the stance chip above.