Securing LLMs in the Wild: Privacy and Security Challenges at the Edge
On the map: LLM safety and security → Membership inference attacks
Abstract (arXiv)
Large Language Models (LLMs) are rapidly moving from research settings into the wild, deployed on enterprise infrastructure, personal devices, and edge platforms. While cloud deployments offer scalable compute, concerns over data sovereignty, compliance, latency, and third-party dependence are driving organizations toward edge and on-premise LLMs. This shift introduces new security and privacy challenges: limited compute and memory force aggressive optimizations, including quantization, pruning, model partitioning, and parameter-efficient adaptation, each of which can introduce vulnerabilities and reshape the threat landscape. We describe this tension as the Security-Efficiency Paradox, mechanisms that improve efficiency may weaken robustness, expose new attack surfaces, or increase privacy risks. We examine how compression can degrade safety alignment, how partitioned inference enables reconstruction attacks, and how continuous local adaptation may cause privacy leakage and model drift. To analyze these risks, we introduce a deployment-centric taxonomy organized around three architectural constraints: the Memory Wall, the Quadratic Wall, and the Compute Wall. We derive a unified constraint model that quantifies when unsafe optimizations become unavoidable, linking each wall to specific attack surfaces. Building on this model, we propose the Secure Operational Efficiency Score (SOES), a holistic metric balancing task accuracy, jailbreak resistance, and privacy against energy, memory, and latency, enabling practitioners to configure edge LLMs under real-world hardware limits. We further present a practical decision procedure and targeted mitigations for each optimization-induced vulnerability. Together, these contributions provide a co-designed framework for jointly evaluating security, privacy, and efficiency, laying a foundation for securing edge-native intelligent systems.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 41 of its 58 references that are in the map. First posted on arXiv 13 Jul 2026.
Builds on
41 of 58 references.
References · 41
- 2017Attention Is All You Needcited by 60,361
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2017Deep reinforcement learning from human preferencescited by 3,912
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2020Learning to summarize from human feedbackcited by 2,588
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
29 more
- 2018The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networkscited by 2,262
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,356
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2024Qwen2.5-Coder Technical Reportcited by 1,203
- 2019Deep Leakage from Gradientscited by 1,021
- 2019Are Sixteen Heads Really Better than One?cited by 816
- 2023A Simple and Effective Pruning Approach for Large Language Modelscited by 800
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2023LLM-Pruner: On the Structural Pruning of Large Language Modelscited by 650
- 2022ZeroQuant: Efficient and Affordable Post-Training Quantization for Large-Scale Transformerscited by 526
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 186
- 2019Bit-Flip Attack: Crushing Neural Network with Progressive Bit Searchcited by 108
- 2024Federated Fine-tuning of Large Language Models under Heterogeneous Tasks and Client Resourcescited by 93
- 2024Exploiting LLM Quantizationcited by 65
- 2024Analyzing and Reducing Catastrophic Forgetting in Parameter Efficient Tuningcited by 60
- 2024Decoding Compressed Trust: Scrutinizing the Trustworthiness of Efficient LLMs Under Compressioncited by 57
- 2024Phi-3 Safety Post-Training: Aligning Language Models with a "Break-Fix" Cyclecited by 32
- 2017Attacking Binarized Neural Networkscited by 29
- 2024Pruning for Protection: Increasing Jailbreak Resistance in Aligned LLMs Without Fine-Tuningcited by 26
- 2023Quantization Aware Attack: Enhancing Transferable Adversarial Attacks by Model Quantizationcited by 14
- 2025Prompt Inference Attack on Distributed Large Language Model Inference Frameworkscited by 14
- 2025On Jailbreaking Quantized Language Models Through Fault Injection Attackscited by 8
- 2025AlignGuard-LoRA: Alignment-Preserving Fine-Tuning via Fisher-Guided Decomposition and Riemannian-Geodesic Collision Regularizationcited by 4
- 2026LoRA as Oraclecited by 4
- 2025Advancing Practical Homomorphic Encryption for Federated Learning: Theoretical Guarantees and Efficiency Optimizationscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness
- 2025A Survey on Privacy Risks and Protection in Large Language Models
- 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs
- 2025DistilLock: Safeguarding LLMs from Unauthorized Knowledge Distillation on the Edge
- 2025A Systematic Evaluation of On-Device LLMs: Quantization, Performance, and Resources
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly
- 2026Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models
- 2026aiXamine: Unified Black-Box Evaluation of Cross-Dimensional Trade-offs in LLM Safety, Security, and Privacy