mlsanityData to 7 Oct 2026

LLM Applications: Current Paradigms and the Next Frontier

arXiv 2503.04596 ↗First posted 6 Mar 2025cs.SE cs.AIcited by 8

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

The development of large language models (LLMs) has given rise to four major application paradigms: LLM app stores, LLM agents, self-hosted LLM services, and LLM-powered devices. Each has its advantages but also shares common challenges. LLM app stores lower the barrier to development but lead to platform lock-in; LLM agents provide autonomy but lack a unified communication mechanism; self-hosted LLM services enhance control but increase deployment complexity; and LLM-powered devices improve privacy and real-time performance but are limited by hardware. This paper reviews and analyzes these paradigms, covering architecture design, application ecosystem, research progress, as well as the challenges and open problems they face. Based on this, we outline the next frontier of LLM applications, characterizing them through three interconnected layers: infrastructure, protocol, and application. We describe their responsibilities and roles of each layer and demonstrate how to mitigate existing fragmentation limitations and improve security and scalability. Finally, we discuss key future challenges, identify opportunities such as protocol-driven cross-platform collaboration and device integration, and propose a research roadmap for openness, security, and sustainability.

Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 29 of its 96 references that are in the map. First posted on arXiv 6 Mar 2025.

Builds on

29 of 96 references.

Closest ancestors · 5

Same direction, newest first

  1. 2025Unveiling Privacy Risks in LLM Agent Memory17 Feb
  2. 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents14 Nov
  3. 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents3 Oct
  4. 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies28 Jul
  5. 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb

Other references · 24

  1. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  2. 2024Taming Throughput-Latency Tradeoff in LLM Inference with Sarathi-Servecited by 507
  3. 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMscited by 424
  4. 2024Understanding the planning of LLM agents: A surveycited by 414
  5. 2024AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agentscited by 319
  6. 2024Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Securitycited by 257
  7. 2025FlashInfer: Efficient and Customizable Attention Engine for LLM Inference Servingcited by 248
  8. 2025MultiAgentBench: Evaluating the Collaboration and Competition of LLM agentscited by 169
  9. 2025Multi-Agent Risks from Advanced AIcited by 150
  10. 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
  11. 2024PLeak: Prompt Leaking Attacks against Large Language Model Applicationscited by 113
  12. 2023ReST meets ReAct: Self-Improvement for Multi-Step Reasoning LLM Agentcited by 78
12 more
  1. 2023From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?cited by 53
  2. 2023LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Pluginscited by 49
  3. 2024Octopus v2: On-device language model for super agentcited by 45
  4. 2023Demystifying RCE Vulnerabilities in LLM-Integrated Appscited by 35
  5. 2025Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systemscited by 27
  6. 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
  7. 2024A First Look at GPT Apps: Landscape and Vulnerabilitycited by 15
  8. 2024LLM App Store Analysis: A Vision and Roadmapcited by 12
  9. 2024On the (In)Security of LLM App Storescited by 12
  10. 2024Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applicationscited by 8
  11. 2024GPTZoo: A Large-scale Dataset of GPTs for the Research Communitycited by 4
  12. 2024IllusionX: An LLM-powered mixed reality personal companioncited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 3; 2026: 5.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Pie: A Programmable Serving System for Emerging LLM Applications
  2. 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems
  3. 2024Large Language Models (LLMs): Deployment, Tokenomics and Sustainability
  4. 2026LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigms
  5. 2026LLM Serving in the Wild: An Empirical Study of Frameworks, Methods, and System Designs
  6. 2024Understanding the Weakness of Large Language Model Agents within a Complex Android Environment
  7. 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness
  8. 2024IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems