LLM Applications: Current Paradigms and the Next Frontier
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
The development of large language models (LLMs) has given rise to four major application paradigms: LLM app stores, LLM agents, self-hosted LLM services, and LLM-powered devices. Each has its advantages but also shares common challenges. LLM app stores lower the barrier to development but lead to platform lock-in; LLM agents provide autonomy but lack a unified communication mechanism; self-hosted LLM services enhance control but increase deployment complexity; and LLM-powered devices improve privacy and real-time performance but are limited by hardware. This paper reviews and analyzes these paradigms, covering architecture design, application ecosystem, research progress, as well as the challenges and open problems they face. Based on this, we outline the next frontier of LLM applications, characterizing them through three interconnected layers: infrastructure, protocol, and application. We describe their responsibilities and roles of each layer and demonstrate how to mitigate existing fragmentation limitations and improve security and scalability. Finally, we discuss key future challenges, identify opportunities such as protocol-driven cross-platform collaboration and device integration, and propose a research roadmap for openness, security, and sustainability.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 29 of its 96 references that are in the map. First posted on arXiv 6 Mar 2025.
Builds on
29 of 96 references.
Closest ancestors · 5
Same direction, newest first
- 2025Unveiling Privacy Risks in LLM Agent Memory17 Feb
- 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents14 Nov
- 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents3 Oct
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies28 Jul
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb
Other references · 24
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2024Taming Throughput-Latency Tradeoff in LLM Inference with Sarathi-Servecited by 507
- 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMscited by 424
- 2024Understanding the planning of LLM agents: A surveycited by 414
- 2024AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agentscited by 319
- 2024Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Securitycited by 257
- 2025FlashInfer: Efficient and Customizable Attention Engine for LLM Inference Servingcited by 248
- 2025MultiAgentBench: Evaluating the Collaboration and Competition of LLM agentscited by 169
- 2025Multi-Agent Risks from Advanced AIcited by 150
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2024PLeak: Prompt Leaking Attacks against Large Language Model Applicationscited by 113
- 2023ReST meets ReAct: Self-Improvement for Multi-Step Reasoning LLM Agentcited by 78
12 more
- 2023From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?cited by 53
- 2023LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Pluginscited by 49
- 2024Octopus v2: On-device language model for super agentcited by 45
- 2023Demystifying RCE Vulnerabilities in LLM-Integrated Appscited by 35
- 2025Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systemscited by 27
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2024A First Look at GPT Apps: Landscape and Vulnerabilitycited by 15
- 2024LLM App Store Analysis: A Vision and Roadmapcited by 12
- 2024On the (In)Security of LLM App Storescited by 12
- 2024Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applicationscited by 8
- 2024GPTZoo: A Large-scale Dataset of GPTs for the Research Communitycited by 4
- 2024IllusionX: An LLM-powered mixed reality personal companioncited by 3
Built on by
Citing papers per year: 2025: 3; 2026: 5.
8 papers.
- 2025LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systemscited by 5
- 2025Unveiling the Landscape of LLM Deployment in the Wild: An Empirical Studycited by 4
- 2025Theoretical Foundations of Scaling Law in Familial Modelscited by 3
- 2026Beyond Preset Identities: How Agents Form Stances and Boundaries in Generative Societiescited by 2
- 2026Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMscited by 1
- 2026Helping Customers in Distress: An LLM-powered Agent that Converses, Probes, and Routescited by 0
- 2026CDAE: Enhancing Perturbation Robustness in Pretrained Language Models with Contrastive Denoisingcited by 0
- 2026Inference-Time Mitigation of Adversarial Political Bias in Large Language Modelscited by 0
- 2026CDAE: Enhancing Perturbation Robustness in Pretrained Language Models with Contrastive Denoising30 Jul 2026
- 2026Inference-Time Mitigation of Adversarial Political Bias in Large Language Models24 Jul 2026
- 2026Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMs9 Jun 2026
- 2026Helping Customers in Distress: An LLM-powered Agent that Converses, Probes, and Routes31 Mar 2026
- 2026Beyond Preset Identities: How Agents Form Stances and Boundaries in Generative Societies24 Mar 2026
- 2025Theoretical Foundations of Scaling Law in Familial Models29 Dec 2025
- 2025LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems2 Dec 2025
- 2025Unveiling the Landscape of LLM Deployment in the Wild: An Empirical Study5 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025Pie: A Programmable Serving System for Emerging LLM Applications
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems
- 2024Large Language Models (LLMs): Deployment, Tokenomics and Sustainability
- 2026LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigms
- 2026LLM Serving in the Wild: An Empirical Study of Frameworks, Methods, and System Designs
- 2024Understanding the Weakness of Large Language Model Agents within a Complex Android Environment
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness
- 2024IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems