A Systematic Survey on Black-Box Attacks in Large Language Models Within Communication Networks

Large Language Models (LLMs) exhibit extraordinary competence in language comprehension and generation. However, as these models find increasing adoption in communication systems, they also become vulnerable to adversarial threats. Such attacks exploit model response mechanisms to generate malicious content or execute jailbreak attempts. Given the paramount importance of reliability and security in communication networks, this issue has garnered considerable attention. Of particular concern are black-box attacks, which circumvent conventional defense strategies by exploiting input-output interactions without requiring internal model knowledge or parameter access. These attacks are highly clandestine and demonstrate substantial practical feasibility, with possible repercussions such as data compromise, the production of harmful content, and the interruption of standard operations. Although relevant research efforts have achieved notable breakthroughs, a comprehensive examination of the topic, especially a systematic review within the realm of communication networks, remains insufficient. This article seeks to offer a comprehensive survey of contemporary black-box attack strategies aimed at LLMs. We begin by retracing the development and applications of such attacks across diverse fields, then propose a taxonomy pertinent to black-box attacks within communication networks, classifying them into three principal categories: scenario and context manipulation attacks, transformation and evasion attacks, and automated and optimized generation attacks. In addition, we examine the associated impacts and potential risks, synthesize limitations in existing research, and present prospective directions and challenges for future research. Our overarching goal is to provide substantial insights that advance the security and reliability of LLMs while promoting the stable evolution of these models within communication network environments.

Authors

Institutions

Publication Details

Journal
IEEE Network
Published
2025-06-11
DOI
https://doi.org/10.1109/mnet.2025.3578610
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

A Systematic Survey on Black-Box Attacks in Large Language Models Within Communication Networks

Jingfeng Xue, Xu‐Guang Guo, Yifeng Fu, Yong Wang et al.
IEEE Network
Network Security and Intrusion Detection
article

A Systematic Survey on Black-Box Attacks in Large Language Models Within Communication Networks

Jingfeng Xue, Xu‐Guang Guo, Yifeng Fu, Yong Wang, Xiuqi Yang, Wenbiao Du
article en

Abstract

Large Language Models (LLMs) exhibit extraordinary competence in language comprehension and generation. However, as these models find increasing adoption in communication systems, they also become vulnerable to adversarial threats. Such attacks exploit model response mechanisms to generate malicious content or execute jailbreak attempts. Given the paramount importance of reliability and security in communication networks, this issue has garnered considerable attention. Of particular concern are black-box attacks, which circumvent conventional defense strategies by exploiting input-output interactions without requiring internal model knowledge or parameter access. These attacks are highly clandestine and demonstrate substantial practical feasibility, with possible repercussions such as data compromise, the production of harmful content, and the interruption of standard operations. Although relevant research efforts have achieved notable breakthroughs, a comprehensive examination of the topic, especially a systematic review within the realm of communication networks, remains insufficient. This article seeks to offer a comprehensive survey of contemporary black-box attack strategies aimed at LLMs. We begin by retracing the development and applications of such attacks across diverse fields, then propose a taxonomy pertinent to black-box attacks within communication networks, classifying them into three principal categories: scenario and context manipulation attacks, transformation and evasion attacks, and automated and optimized generation attacks. In addition, we examine the associated impacts and potential risks, synthesize limitations in existing research, and present prospective directions and challenges for future research. Our overarching goal is to provide substantial insights that advance the security and reliability of LLMs while promoting the stable evolution of these models within communication network environments.

IEEE NetworkVol. 39(5)
Beijing Institute of Technology (CN)
Beijing Institute of Technology
Quality Education
Openalex Percentile: Top 86%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.