A Comprehensive Overview of Backdoor Attacks in Large Language Models within Communication Networks
On the map: LLM safety and security → Backdoor and data poisoning attacks
Abstract (arXiv)
The Large Language Models (LLMs) are poised to offer efficient and intelligent services for future mobile communication networks, owing to their exceptional capabilities in language comprehension and generation. However, the extremely high data and computational resource requirements for the performance of LLMs compel developers to resort to outsourcing training or utilizing third-party data and computing resources. These strategies may expose the model within the network to maliciously manipulated training data and processing, providing an opportunity for attackers to embed a hidden backdoor into the model, termed a backdoor attack. Backdoor attack in LLMs refers to embedding a hidden backdoor in LLMs that causes the model to perform normally on benign samples but exhibit degraded performance on poisoned ones. This issue is particularly concerning within communication networks where reliability and security are paramount. Despite the extensive research on backdoor attacks, there remains a lack of in-depth exploration specifically within the context of LLMs employed in communication networks, and a systematic review of such attacks is currently absent. In this survey, we systematically propose a taxonomy of backdoor attacks in LLMs as used in communication networks, dividing them into four major categories: input-triggered, prompt-triggered, instruction-triggered, and demonstration-triggered attacks. Furthermore, we conduct a comprehensive analysis of the benchmark datasets. Finally, we identify potential problems and open challenges, offering valuable insights into future research directions for enhancing the security and integrity of LLMs in communication networks.
Key facts. Cited by 38 papers in the map (data through 7 Oct 2026). Placed in Backdoor and data poisoning attacks, one of 12 directions in LLM safety and security. First posted on arXiv 28 Aug 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 4; 2024: 16; 2025: 14; 2026: 4.
38 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 127
- 2023Unleashing the potential of prompt engineering for large language modelscited by 72
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
- 2023LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystemcited by 35
- 2025PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimizationcited by 29
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?cited by 28
- 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMscited by 18
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Surveycited by 10
- 2025VeriLeaky: Navigating IP Protection vs Utility in Fine-Tuning for LLM-Driven Verilog Codingcited by 10
- 2025SALAD: Systematic Assessment of Machine Unlearning on LLM-Aided Hardware Designcited by 10
26 more
- 2025LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasurescited by 8
- 2024Large Language Models meet Network Slicing Management and Orchestrationcited by 7
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigmscited by 7
- 2023Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systemscited by 6
- 2024Concept-ROT: Poisoning Concepts in Large Language Models with Model Editingcited by 6
- 2024Can LLMs be Fooled? Investigating Vulnerabilities in LLMscited by 5
- 2024Neutralizing Backdoors through Information Conflicts for Large Language Modelscited by 4
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuitscited by 3
- 2024Self and Cross-Model Distillation for LLMs: Effective Methods for Refusal Pattern Alignmentcited by 3
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuningcited by 3
- 2025SoK: Semantic Privacy in Large Language Modelscited by 3
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Modelscited by 2
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessmentcited by 2
- 2024Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognitioncited by 1
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
- 2025Reformulation is All You Need: Addressing Malicious Text Features in DNNscited by 1
- 2025From Large AI Models to Agentic AI: A Tutorial on Future Intelligent Communicationscited by 1
- 2026PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systemscited by 1
- 2024Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimizationcited by 0
- 2024Behavior Backdoor for Deep Learning Modelscited by 0
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniquescited by 0
- 2025Cancer Diagnosis Categorization in Electronic Health Records Using Large Language Models and BioBERT: Model Performance Evaluation Studycited by 0
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agentscited by 0
- 2026Efficient and Adaptable Detection of Malicious LLM Prompts via Bootstrap Aggregationcited by 0
- 2026On the Privacy of LLMs: An Ablation Studycited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systemscited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systems15 Sep 2026
- 2026On the Privacy of LLMs: An Ablation Study4 May 2026
- 2026PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems26 Mar 2026
- 2026Efficient and Adaptable Detection of Malicious LLM Prompts via Bootstrap Aggregation8 Feb 2026
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agents29 Nov 2025
- 2025Cancer Diagnosis Categorization in Electronic Health Records Using Large Language Models and BioBERT: Model Performance Evaluation Study8 Oct 2025
- 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs15 Sep 2025
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment12 Aug 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms8 Jul 2025
- 2025SoK: Semantic Privacy in Large Language Models30 Jun 2025
- 2025SALAD: Systematic Assessment of Machine Unlearning on LLM-Aided Hardware Design2 Jun 2025
26 more
- 2025From Large AI Models to Agentic AI: A Tutorial on Future Intelligent Communications28 May 2025
- 2025LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures2 May 2025
- 2025PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization10 Apr 2025
- 2025VeriLeaky: Navigating IP Protection vs Utility in Fine-Tuning for LLM-Driven Verilog Coding17 Mar 2025
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuning12 Mar 2025
- 2025Reformulation is All You Need: Addressing Malicious Text Features in DNNs2 Feb 2025
- 2024Concept-ROT: Poisoning Concepts in Large Language Models with Model Editing17 Dec 2024
- 2024Behavior Backdoor for Deep Learning Models2 Dec 2024
- 2024Neutralizing Backdoors through Information Conflicts for Large Language Models27 Nov 2024
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024
- 2024Can LLMs be Fooled? Investigating Vulnerabilities in LLMs30 Jul 2024
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies28 Jul 2024
- 2024Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization21 Jul 2024
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?22 Jun 2024
- 2024Self and Cross-Model Distillation for LLMs: Effective Methods for Refusal Pattern Alignment17 Jun 2024
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models9 Jun 2024
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits3 Jun 2024
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Survey1 Jun 2024
- 2024Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition3 Apr 2024
- 2024Large Language Models meet Network Slicing Management and Orchestration20 Mar 2024
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices19 Mar 2024
- 2024Security and Privacy Challenges of Large Language Models: A Survey30 Jan 2024
- 2023LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystem6 Dec 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems20 Nov 2023
- 2023Unleashing the potential of prompt engineering for large language models23 Oct 2023
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Surveycited by 10
- 2025SALAD: Systematic Assessment of Machine Unlearning on LLM-Aided Hardware Designcited by 10
- 2023Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systemscited by 6
- 2024Neutralizing Backdoors through Information Conflicts for Large Language Modelscited by 4
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuitscited by 3
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Modelscited by 2
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessmentcited by 2
- 2025Reformulation is All You Need: Addressing Malicious Text Features in DNNscited by 1
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agentscited by 0
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agents29 Nov 2025
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment12 Aug 2025
- 2025SALAD: Systematic Assessment of Machine Unlearning on LLM-Aided Hardware Design2 Jun 2025
- 2025Reformulation is All You Need: Addressing Malicious Text Features in DNNs2 Feb 2025
- 2024Neutralizing Backdoors through Information Conflicts for Large Language Models27 Nov 2024
- 2024Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models9 Jun 2024
- 2024Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits3 Jun 2024
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Survey1 Jun 2024
- 2024Security and Privacy Challenges of Large Language Models: A Survey30 Jan 2024
- 2023Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems20 Nov 2023
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 127
- 2023LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystemcited by 35
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigmscited by 7
- 2025From Large AI Models to Agentic AI: A Tutorial on Future Intelligent Communicationscited by 1
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systemscited by 0
- 2026Large Language Models in the Loop: A Stability- and Network-Aware Survey in Networked Control, Cyber-Physical, and Multi-Agent Systems15 Sep 2026
- 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms8 Jul 2025
- 2025From Large AI Models to Agentic AI: A Tutorial on Future Intelligent Communications28 May 2025
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies28 Jul 2024
- 2023LLM as OS, Agents as Apps: Envisioning AIOS, Agents and the AIOS-Agent Ecosystem6 Dec 2023
- 2025PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimizationcited by 29
- 2026PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systemscited by 1
- 2026On the Privacy of LLMs: An Ablation Studycited by 0
- 2026On the Privacy of LLMs: An Ablation Study4 May 2026
- 2026PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems26 Mar 2026
- 2025PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization10 Apr 2025
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2023Unleashing the potential of prompt engineering for large language modelscited by 72
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
- 2025VeriLeaky: Navigating IP Protection vs Utility in Fine-Tuning for LLM-Driven Verilog Codingcited by 10
- 2025LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasurescited by 8
- 2024Large Language Models meet Network Slicing Management and Orchestrationcited by 7
- 2024Concept-ROT: Poisoning Concepts in Large Language Models with Model Editingcited by 6
- 2024Can LLMs be Fooled? Investigating Vulnerabilities in LLMscited by 5
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuningcited by 3
- 2025SoK: Semantic Privacy in Large Language Modelscited by 3
- 2024Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognitioncited by 1
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
12 most cited of 16 All 16 (JSON)
- 2025Cancer Diagnosis Categorization in Electronic Health Records Using Large Language Models and BioBERT: Model Performance Evaluation Study8 Oct 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025SoK: Semantic Privacy in Large Language Models30 Jun 2025
- 2025LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures2 May 2025
- 2025VeriLeaky: Navigating IP Protection vs Utility in Fine-Tuning for LLM-Driven Verilog Coding17 Mar 2025
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuning12 Mar 2025
- 2024Concept-ROT: Poisoning Concepts in Large Language Models with Model Editing17 Dec 2024
- 2024Behavior Backdoor for Deep Learning Models2 Dec 2024
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024
- 2024Can LLMs be Fooled? Investigating Vulnerabilities in LLMs30 Jul 2024
- 2024Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization21 Jul 2024
- 2024Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition3 Apr 2024
12 newest of 16 All 16 (JSON)