Privacy Preserving Prompt Engineering: A Survey
Not on the map. Why?
Abstract (arXiv)
Pre-trained language models (PLMs) have demonstrated significant proficiency in solving a wide range of general natural language processing (NLP) tasks. Researchers have observed a direct correlation between the performance of these models and their sizes. As a result, the sizes of these models have notably expanded in recent years, persuading researchers to adopt the term large language models (LLMs) to characterize the larger-sized PLMs. The size expansion comes with a distinct capability called in-context learning (ICL), which represents a special form of prompting and allows the models to be utilized through the presentation of demonstration examples without modifications to the model parameters. Although interesting, privacy concerns have become a major obstacle in its widespread usage. Multiple studies have examined the privacy risks linked to ICL and prompting in general, and have devised techniques to alleviate these risks. Thus, there is a necessity to organize these mitigation techniques for the benefit of the community. This survey provides a systematic overview of the privacy protection methods employed during ICL and prompting in general. We review, analyze, and compare different methods under this paradigm. Furthermore, we provide a summary of the resources accessible for the development of these frameworks. Finally, we discuss the limitations of these frameworks and offer a detailed examination of the promising areas that necessitate further exploration.
Key facts. Cited by 24 papers in the map (data through 7 Oct 2026). Builds on 100 of its 173 references that are in the map. First posted on arXiv 9 Apr 2024.
Builds on
100 of 173 references.
References · 100
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
38 more
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2016Deep Learning with Differential Privacycited by 2,682
- 2023A Survey of Large Language Modelscited by 2,537
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2021Learning to Prompt for Vision-Language Modelscited by 2,269
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
- 2022Visual Prompt Tuningcited by 1,674
- 2022Least-to-Most Prompting Enables Complex Reasoning in Large Language Modelscited by 1,397
- 2018Moment Matching for Multi-Source Domain Adaptationcited by 1,327
- 2021Improving language models by retrieving from trillions of tokenscited by 1,278
- 2018Hierarchical Neural Story Generationcited by 1,182
- 2022Atlas: Few-shot Learning with Retrieval Augmented Language Modelscited by 940
- 2018Adafactor: Adaptive Learning Rates with Sublinear Memory Costcited by 896
- 2023Vision-Language Models for Vision Tasks: A Surveycited by 834
- 2019Generalization through Memorization: Nearest Neighbor Language Modelscited by 788
- 2022Galactica: A Large Language Model for Sciencecited by 736
- 2020Self-supervised Learning: Generative or Contrastivecited by 693
- 2021MedMNIST v2 -- A large-scale lightweight benchmark for 2D and 3D biomedical image classificationcited by 682
- 2017Skin Lesion Analysis Toward Melanoma Detection: A Challenge at the 2017 International Symposium on Biomedical Imaging (ISBI), Hosted by the International Skin Imaging Collaboration (ISIC)cited by 549
- 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 530
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2020Pre-trained Models for Natural Language Processing: A Surveycited by 504
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2021Pre-Trained Models: Past, Present and Futurecited by 319
- 2023LLM-Adapters: An Adapter Family for Parameter-Efficient Fine-Tuning of Large Language Modelscited by 317
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 280
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 278
- 2022TabLLM: Few-shot Classification of Tabular Data with Large Language Modelscited by 273
- 2018Scalable Private Learning with PATEcited by 266
- 2022OPT-IML: Scaling Language Model Instruction Meta Learning through the Lens of Generalizationcited by 235
- 2023Large Language Model as Attributed Training Data Generator: A Tale of Diversity and Biascited by 230
- 2021Personalized Federated Learning using Hypernetworkscited by 210
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2022Talking About Large Language Modelscited by 174
- 2020Answering Complex Open-Domain Questions with Multi-Hop Dense Retrievalcited by 160
50 most cited of 100 All 100 (JSON)
Built on by
Citing papers per year: 2024: 6; 2025: 13; 2026: 5.
24 papers.
Sort:
By area:
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2024A Survey of Prompt Engineering Methods in Large Language Models for Different NLP Taskscited by 46
- 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agentscited by 26
- 2025AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agentscited by 25
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regressioncited by 14
- 2024Provable Differentially Private Computation of the Cross-Attention Mechanismcited by 14
- 2025Can Textual Gradient Work in Federated Learning?cited by 14
- 2024The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Promptscited by 13
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agentscited by 11
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applicationscited by 8
- 2025Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generationcited by 8
- 2025LLM Access Shield: Domain-Specific LLM Framework for Privacy Policy Compliancecited by 6
12 more
- 2025What Makes a Good Natural Language Prompt?cited by 6
- 2025Multilingual Prompt Engineering in Large Language Models: A Survey Across NLP Taskscited by 5
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
- 2025LegalGuardian: A Privacy-Preserving Framework for Secure Integration of Large Language Models in Legal Practicecited by 2
- 2025DP-GTR: Differentially Private Prompt Protection via Group Text Rewritingcited by 2
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generationcited by 2
- 2024Confidential Prompting: Privacy-preserving LLM Inference on Cloudcited by 1
- 2025Deploying Privacy Guardrails for LLMs: A Comparative Analysis of Real-World Applicationscited by 1
- 2026FERA: Uncertainty-Aware Federated Reasoning for Large Language Modelscited by 1
- 2026Demystifying the Privacy-Utility Trade-off in LLM Interactionscited by 1
- 2026In Vino Veritas and Vulnerabilities: Examining LLM Safety via Drunk Language Inducementcited by 0
- 2026Privacy Without Losing Place: A Paradigm for Private Retrieval in Spatial RAGscited by 0
- 2026Demystifying the Privacy-Utility Trade-off in LLM Interactions10 Sep 2026
- 2026FERA: Uncertainty-Aware Federated Reasoning for Large Language Models11 May 2026
- 2026Privacy Without Losing Place: A Paradigm for Private Retrieval in Spatial RAGs6 May 2026
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generation8 Apr 2026
- 2026In Vino Veritas and Vulnerabilities: Examining LLM Safety via Drunk Language Inducement19 Jan 2026
- 2025AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents9 Sep 2025
- 2025Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation5 Aug 2025
- 2025What Makes a Good Natural Language Prompt?7 Jun 2025
- 2025LLM Access Shield: Domain-Specific LLM Framework for Privacy Policy Compliance22 May 2025
- 2025Multilingual Prompt Engineering in Large Language Models: A Survey Across NLP Tasks16 May 2025
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents24 Apr 2025
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks24 Apr 2025
12 more
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2025DP-GTR: Differentially Private Prompt Protection via Group Text Rewriting6 Mar 2025
- 2025Can Textual Gradient Work in Federated Learning?27 Feb 2025
- 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents22 Feb 2025
- 2025Deploying Privacy Guardrails for LLMs: A Comparative Analysis of Real-World Applications21 Jan 2025
- 2025LegalGuardian: A Privacy-Preserving Framework for Secure Integration of Large Language Models in Legal Practice19 Jan 2025
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applications11 Oct 2024
- 2024Confidential Prompting: Privacy-preserving LLM Inference on Cloud27 Sep 2024
- 2024Provable Differentially Private Computation of the Cross-Attention Mechanism20 Jul 2024
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regression18 Jul 2024
- 2024A Survey of Prompt Engineering Methods in Large Language Models for Different NLP Tasks17 Jul 2024
- 2024The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Prompts20 Jun 2024
- 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agentscited by 26
- 2025AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agentscited by 25
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agentscited by 11
- 2025AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents9 Sep 2025
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents24 Apr 2025
- 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents22 Feb 2025
- 2024A Survey of Prompt Engineering Methods in Large Language Models for Different NLP Taskscited by 46
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regressioncited by 14
- 2025Can Textual Gradient Work in Federated Learning?cited by 14
- 2024The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Promptscited by 13
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applicationscited by 8
- 2025LLM Access Shield: Domain-Specific LLM Framework for Privacy Policy Compliancecited by 6
- 2025What Makes a Good Natural Language Prompt?cited by 6
- 2025Multilingual Prompt Engineering in Large Language Models: A Survey Across NLP Taskscited by 5
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
- 2025LegalGuardian: A Privacy-Preserving Framework for Secure Integration of Large Language Models in Legal Practicecited by 2
- 2025DP-GTR: Differentially Private Prompt Protection via Group Text Rewritingcited by 2
- 2024Confidential Prompting: Privacy-preserving LLM Inference on Cloudcited by 1
12 most cited of 13 All 13 (JSON)
- 2026Demystifying the Privacy-Utility Trade-off in LLM Interactions10 Sep 2026
- 2025What Makes a Good Natural Language Prompt?7 Jun 2025
- 2025LLM Access Shield: Domain-Specific LLM Framework for Privacy Policy Compliance22 May 2025
- 2025Multilingual Prompt Engineering in Large Language Models: A Survey Across NLP Tasks16 May 2025
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks24 Apr 2025
- 2025DP-GTR: Differentially Private Prompt Protection via Group Text Rewriting6 Mar 2025
- 2025Can Textual Gradient Work in Federated Learning?27 Feb 2025
- 2025LegalGuardian: A Privacy-Preserving Framework for Secure Integration of Large Language Models in Legal Practice19 Jan 2025
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applications11 Oct 2024
- 2024Confidential Prompting: Privacy-preserving LLM Inference on Cloud27 Sep 2024
- 2024Differential Privacy Mechanisms in Neural Tangent Kernel Regression18 Jul 2024
- 2024A Survey of Prompt Engineering Methods in Large Language Models for Different NLP Tasks17 Jul 2024
12 newest of 13 All 13 (JSON)