mlsanityData to 14 Oct 2026

Securing LLMs in the Wild: Privacy and Security Challenges at the Edge

arXiv 2607.13088 ↗First posted 13 Jul 2026cs.CR cs.LGcited by 0

On the map: LLM safety and security → Membership inference attacks

Abstract (arXiv)

Large Language Models (LLMs) are rapidly moving from research settings into the wild, deployed on enterprise infrastructure, personal devices, and edge platforms. While cloud deployments offer scalable compute, concerns over data sovereignty, compliance, latency, and third-party dependence are driving organizations toward edge and on-premise LLMs. This shift introduces new security and privacy challenges: limited compute and memory force aggressive optimizations, including quantization, pruning, model partitioning, and parameter-efficient adaptation, each of which can introduce vulnerabilities and reshape the threat landscape. We describe this tension as the Security-Efficiency Paradox, mechanisms that improve efficiency may weaken robustness, expose new attack surfaces, or increase privacy risks. We examine how compression can degrade safety alignment, how partitioned inference enables reconstruction attacks, and how continuous local adaptation may cause privacy leakage and model drift. To analyze these risks, we introduce a deployment-centric taxonomy organized around three architectural constraints: the Memory Wall, the Quadratic Wall, and the Compute Wall. We derive a unified constraint model that quantifies when unsafe optimizations become unavoidable, linking each wall to specific attack surfaces. Building on this model, we propose the Secure Operational Efficiency Score (SOES), a holistic metric balancing task accuracy, jailbreak resistance, and privacy against energy, memory, and latency, enabling practitioners to configure edge LLMs under real-world hardware limits. We further present a practical decision procedure and targeted mitigations for each optimization-induced vulnerability. Together, these contributions provide a co-designed framework for jointly evaluating security, privacy, and efficiency, laying a foundation for securing edge-native intelligent systems.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 41 of its 58 references that are in the map. First posted on arXiv 13 Jul 2026.

Builds on

41 of 58 references.

References · 41

  1. 2017Attention Is All You Needcited by 60,361
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  4. 2021Evaluating Large Language Models Trained on Codecited by 8,320
  5. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  6. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  7. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  8. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
  9. 2017Deep reinforcement learning from human preferencescited by 3,912
  10. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
  11. 2020Learning to summarize from human feedbackcited by 2,588
  12. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
29 more
  1. 2018The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networkscited by 2,262
  2. 2020Extracting Training Data from Large Language Modelscited by 2,189
  3. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
  4. 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,356
  5. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  6. 2024Qwen2.5-Coder Technical Reportcited by 1,203
  7. 2019Deep Leakage from Gradientscited by 1,021
  8. 2019Are Sixteen Heads Really Better than One?cited by 816
  9. 2023A Simple and Effective Pruning Approach for Large Language Modelscited by 800
  10. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  11. 2023LLM-Pruner: On the Structural Pruning of Large Language Modelscited by 650
  12. 2022ZeroQuant: Efficient and Affordable Post-Training Quantization for Large-Scale Transformerscited by 526
  13. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
  14. 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
  15. 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 186
  16. 2019Bit-Flip Attack: Crushing Neural Network with Progressive Bit Searchcited by 108
  17. 2024Federated Fine-tuning of Large Language Models under Heterogeneous Tasks and Client Resourcescited by 93
  18. 2024Exploiting LLM Quantizationcited by 65
  19. 2024Analyzing and Reducing Catastrophic Forgetting in Parameter Efficient Tuningcited by 60
  20. 2024Decoding Compressed Trust: Scrutinizing the Trustworthiness of Efficient LLMs Under Compressioncited by 57
  21. 2024Phi-3 Safety Post-Training: Aligning Language Models with a "Break-Fix" Cyclecited by 32
  22. 2017Attacking Binarized Neural Networkscited by 29
  23. 2024Pruning for Protection: Increasing Jailbreak Resistance in Aligned LLMs Without Fine-Tuningcited by 26
  24. 2023Quantization Aware Attack: Enhancing Transferable Adversarial Attacks by Model Quantizationcited by 14
  25. 2025Prompt Inference Attack on Distributed Large Language Model Inference Frameworkscited by 14
  26. 2025On Jailbreaking Quantized Language Models Through Fault Injection Attackscited by 8
  27. 2025AlignGuard-LoRA: Alignment-Preserving Fine-Tuning via Fisher-Guided Decomposition and Riemannian-Geodesic Collision Regularizationcited by 4
  28. 2026LoRA as Oraclecited by 4
  29. 2025Advancing Practical Homomorphic Encryption for Federated Learning: Theoretical Guarantees and Efficiency Optimizationscited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness
  2. 2025A Survey on Privacy Risks and Protection in Large Language Models
  3. 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs
  4. 2025DistilLock: Safeguarding LLMs from Unauthorized Knowledge Distillation on the Edge
  5. 2025A Systematic Evaluation of On-Device LLMs: Quantization, Performance, and Resources
  6. 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly
  7. 2026Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models
  8. 2026aiXamine: Unified Black-Box Evaluation of Cross-Dimensional Trade-offs in LLM Safety, Security, and Privacy