{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:18:40Z","timestamp":1784135920380,"version":"3.55.0"},"reference-count":325,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62394321"],"award-info":[{"award-number":["62394321"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62201029"],"award-info":[{"award-number":["62201029"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"State Key Development Program in 14th Five Year","doi-asserted-by":"publisher","award":["2021QY1702"],"award-info":[{"award-number":["2021QY1702"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2025,8]]},"DOI":"10.1109\/comst.2024.3503680","type":"journal-article","created":{"date-parts":[[2024,11,21]],"date-time":"2024-11-21T14:28:41Z","timestamp":1732199321000},"page":"2733-2764","source":"Crossref","is-referenced-by-count":55,"title":["Toward Federated Large Language Models: Motivations, Methods, and Future Directions"],"prefix":"10.1109","volume":"27","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2396-8917","authenticated-orcid":false,"given":"Yujun","family":"Cheng","sequence":"first","affiliation":[{"name":"Department of Electronic Information Engineering, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2626-4883","authenticated-orcid":false,"given":"Weiting","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Electronic and Information Engineering, Beijing Jiaotong University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0117-6668","authenticated-orcid":false,"given":"Zhewei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Electronic Information Engineering, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7684-8540","authenticated-orcid":false,"given":"Chuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7809-1932","authenticated-orcid":false,"given":"Shengjin","family":"Wang","sequence":"additional","affiliation":[{"name":"Department of Electronic Information Engineering, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7052-0007","authenticated-orcid":false,"given":"Shiwen","family":"Mao","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Auburn University, Auburn, AL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3317242"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2024.3353265"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3302474"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2020.3024783"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3130901"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2024.3356178"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3315138"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2024.3390131"},{"key":"ref9","volume-title":"Language models are unsupervised multitask learners","author":"Radford","year":"2019"},{"key":"ref10","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Brown"},{"key":"ref11","article-title":"GPT-4 technical report","volume-title":"arXiv:2303.08774","author":"Achiam","year":"2023"},{"issue":"240","key":"ref12","first-page":"1","article-title":"PaLM: Scaling language modeling with pathways","volume":"24","author":"Chowdhery","year":"2023","journal-title":"J. Mach. Learn. Res."},{"key":"ref13","article-title":"LLaMA: Open and efficient foundation language models","author":"Touvron","year":"2023","journal-title":"arXiv:2302.13971"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3617680"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2023.3238521"},{"key":"ref16","first-page":"1","article-title":"PlanBench: An extensible benchmark for evaluating large language models on planning and reasoning about change","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Valmeekam"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3600211.3604737"},{"key":"ref18","first-page":"1","article-title":"Designing LLM-based support for homelessness caseworkers","volume-title":"Proc. AAAI Workshop Public Sector LLMs, Algorithmic Sociotechn. Design","author":"Nelson"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00642"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.eacl-srw.13"},{"key":"ref21","first-page":"21558","article-title":"Is your code generated by ChatGPT really correct? rigorous evaluation of large language models for code generation","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Liu"},{"key":"ref22","first-page":"46595","article-title":"Judging LLM-as-a-judge with MT-bench and Chatbot arena","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Zheng"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3616855.3635737"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/BigData59044.2023.10386911"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2021.3118352"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3303017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/mnet.2024.3355922"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP48485.2024.10446879"},{"key":"ref29","article-title":"Federated fine-tuning of llms on the very edge: The good, the bad, the ugly","author":"Woisetschl\u00e4ger","year":"2023","journal-title":"arXiv:2310.03150"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3642970.3655834"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-40292-0_1"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3090430"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3075439"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-022-01647-y"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3625558"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.seta.2022.102987"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3315746"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3216981"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2022.09.011"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-024-02443-6"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-024-4222-0"},{"key":"ref42","article-title":"Aligning large language models with human: A survey","author":"Wang","year":"2023","journal-title":"arXiv:2307.12966"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3712001"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3349952"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3368208"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/WACVW60836.2024.00106"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"ref48","article-title":"Federated foundation models: Privacy-preserving and collaborative learning for large models","author":"Yu","year":"2023","journal-title":"arXiv:2305.11414"},{"key":"ref49","article-title":"Federated large language model: A position paper","author":"Chen","year":"2023","journal-title":"arXiv:2307.08925"},{"key":"ref50","article-title":"When foundation model meets federated learning: Motivations, challenges, and future directions","author":"Zhuang","year":"2023","journal-title":"arXiv:2306.15546"},{"key":"ref51","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. 20th Int. Conf. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3124599"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2021.3116132"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3352628"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i8.26187"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3179892"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/MCI.2022.3180932"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00324"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TAFFC.2022.3204972"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-6576-5_6"},{"key":"ref62","article-title":"The pile: An 800GB dataset of diverse text for language modeling","author":"Gao","year":"2020","journal-title":"arXiv:2101.00027"},{"key":"ref63","volume-title":"Wikipedia, the free encyclopedia","year":"2001"},{"issue":"1","key":"ref64","first-page":"5485","article-title":"Exploring the limits of transfer learning with a unified text-to-text transformer","volume":"21","author":"Raffel","year":"2020","journal-title":"J. Mach. Learn. Res."},{"key":"ref65","article-title":"CodeGen: An open large language model for code with multi-turn program synthesis","author":"Nijkamp","year":"2022","journal-title":"arXiv:2203.13474"},{"key":"ref66","volume-title":"BigQuery dataset","year":"2024"},{"key":"ref67","article-title":"GLM: General language model pretraining with autoregressive blank infilling","author":"Du","year":"2021","journal-title":"arXiv:2103.10360"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.11"},{"key":"ref69","first-page":"27730","article-title":"Training language models to follow instructions with human feedback","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Ouyang"},{"key":"ref70","first-page":"1","article-title":"LIMA: Less is more for alignment","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Zhou"},{"key":"ref71","first-page":"1","article-title":"Are aligned neural networks adversarially aligned?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Carlini"},{"key":"ref72","article-title":"LoRa: Low-rank adaptation of large language models","author":"Hu","year":"2021","journal-title":"arXiv:2106.09685"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.acl-long.353"},{"key":"ref74","article-title":"P-Tuning v2: Prompt tuning can be comparable to fine-tuning universally across scales and tasks","author":"Liu","year":"2021","journal-title":"arXiv:2110.07602"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1016\/j.aiopen.2023.08.012"},{"key":"ref76","article-title":"Will we run out of data? An analysis of the limits of scaling datasets in machine learning","author":"Villalobos","year":"2022","journal-title":"arXiv:2211.04325"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3367329"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3055564"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-021-01453-z"},{"key":"ref80","first-page":"814","article-title":"Papaya: Practical, private, and scalable federated learning","volume-title":"Proc. Mach. Learn. Syst.","volume":"4","author":"Huba"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/IWQOS52092.2021.9521274"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2021.3118422"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3334614"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3447085"},{"key":"ref85","article-title":"SqueezeLLM: Dense-and-sparse quantization","author":"Kim","year":"2023","journal-title":"arXiv:2306.07629"},{"key":"ref86","first-page":"1","article-title":"Pruning vs quantization: Which is better?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Kuzmin"},{"key":"ref87","first-page":"1","article-title":"MiniLLM: Knowledge distillation of large language models","volume-title":"Proc. 12th Int. Conf. Learn. Represent.","author":"Gu"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i2.25236"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657722"},{"key":"ref90","first-page":"1","article-title":"OpenAGI: When LLM meets domain experts","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Ge"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2022.3147792"},{"key":"ref92","first-page":"3581","article-title":"Federated learning with buffered asynchronous aggregation","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Nguyen"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2023.3242719"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ICC51166.2024.10622903"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/3527621"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i12.29297"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.2300419"},{"key":"ref98","first-page":"20296","article-title":"FedVS: Straggler-resilient and privacy-preserving vertical federated learning for split models","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Li"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488756"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3043139"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2023.3293068"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i6.25891"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01957"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/3596907"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26330"},{"key":"ref106","first-page":"5234","article-title":"Efficient personalized federated learning via sparse model-adaptation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Chen"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01956"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3357847"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3070203"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01501"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00090"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00403"},{"key":"ref113","first-page":"1","article-title":"TrojLLM: A black-box trojan prompt attack on large language models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Xue"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/3551636"},{"key":"ref115","first-page":"39299","article-title":"Data poisoning attacks against multimodal encoders","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yang"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3246766"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01485"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.emnlp-main.6"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3297103"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/3570953"},{"key":"ref121","first-page":"29515","article-title":"Towards personalized federated learning via heterogeneous model reassembly","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Wang"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3269062"},{"key":"ref123","article-title":"Federated learning for mobile keyboard prediction","author":"Hard","year":"2018","journal-title":"arXiv:1811.03604"},{"key":"ref124","article-title":"Applied federated learning: Improving Google keyboard query suggestions","author":"Yang","year":"2018","journal-title":"arXiv:1812.02903"},{"key":"ref125","article-title":"TensorFlow: Large-scale machine learning on heterogeneous distributed systems","author":"Abadi","year":"2016","journal-title":"arXiv:1603.04467"},{"issue":"100","key":"ref126","first-page":"1","article-title":"FedLab: A flexible federated learning framework","volume":"24","author":"Zeng","year":"2023","journal-title":"J. Mach. Learn. Res."},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539039"},{"key":"ref128","article-title":"IBM federated learning: An enterprise framework white paper v0. 1","author":"Ludwig","year":"2020","journal-title":"arXiv:2007.10987"},{"issue":"1","key":"ref129","first-page":"105","article-title":"PaddlePaddle: An open-source deep learning platform from industrial practice","volume":"1","author":"Ma","year":"2019","journal-title":"Front. Data Domput."},{"key":"ref130","article-title":"FedML: A research library and benchmark for federated machine learning","author":"He","year":"2020","journal-title":"arXiv:2007.13518"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.findings-naacl.13"},{"key":"ref132","article-title":"FATE-LLM: A industrial grade federated learning framework for large language models","author":"Fan","year":"2023","journal-title":"arXiv:2310.10049"},{"key":"ref133","article-title":"Federatedscope-LLM: A comprehensive package for fine-tuning large language models in federated learning","author":"Kuang","year":"2023","journal-title":"arXiv:2309.00363"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671582"},{"key":"ref135","article-title":"Towards building the federated GPT: Federated instruction tuning","author":"Zhang","year":"2023","journal-title":"arXiv:2305.05644"},{"key":"ref136","volume-title":"Privacy-preserving fine-tuning of artificial intelligence (AI) foundation models with federated learning, differential privacy, Offsite tuning, and parameter-efficient fine-tuning (PEFT)","author":"Zhao","year":"2023"},{"key":"ref137","article-title":"Flower: A friendly federated learning research framework","author":"Beutel","year":"2020","journal-title":"arXiv:2007.14390"},{"key":"ref138","article-title":"FedCLIP: Fast generalization and personalization for CLIP in federated learning","author":"Lu","year":"2023","journal-title":"arXiv:2302.13485"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2022-10644"},{"key":"ref140","first-page":"12449","article-title":"wav2vec 2.0: A framework for self-supervised learning of speech representations","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Baevski"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE-Berlin58801.2023.10375664"},{"key":"ref142","first-page":"19332","article-title":"Federated learning from pre-trained models: A contrastive learning approach","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Tan"},{"key":"ref143","article-title":"Where to begin? On the impact of pre-training and initialization in federated learning","author":"Nguyen","year":"2022","journal-title":"arXiv:2210.08090"},{"key":"ref144","first-page":"1","article-title":"On the importance and applicability of pre-training for federated learning","volume-title":"Proc. 11th Int. Conf. Learn. Represent.","author":"Chen"},{"key":"ref145","first-page":"1","article-title":"Towards federated foundation models: Scalable dataset pipelines for group-structured learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Charles"},{"key":"ref146","article-title":"GPT-FL: Generative pre-trained model-assisted federated learning","author":"Zhang","year":"2023","journal-title":"arXiv:2306.02210"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-naacl.59"},{"key":"ref148","article-title":"Low-parameter federated learning with large language models","author":"Jiang","year":"2023","journal-title":"arXiv:2307.13896"},{"key":"ref149","first-page":"456","article-title":"Reducing communication overhead in federated learning for pre-trained language models using parameter-efficient finetuning","volume-title":"Proc. Conf. Lifelong Learn. Agents","author":"Malaviya"},{"key":"ref150","article-title":"FedTune: A deep dive into efficient federated fine-tuning with pre-trained transformers","author":"Chen","year":"2022","journal-title":"arXiv:2211.08025"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-acl.632"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10095356"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3302410"},{"key":"ref154","article-title":"SplitLoRA: A split parameter-efficient fine-tuning framework for large language models","author":"Lin","year":"2024","journal-title":"arXiv:2407.00952"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3334910"},{"key":"ref156","article-title":"DistilBERT, a distilled version of BERT: Smaller, faster, cheaper and lighter","author":"Sanh","year":"2019","journal-title":"arXiv:1910.01108"},{"key":"ref157","article-title":"Distilling task-specific knowledge from BERT into simple neural networks","author":"Tang","year":"2019","journal-title":"arXiv:1903.12136"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.734"},{"key":"ref159","article-title":"FedJudge: Federated legal large language model","author":"Yue","year":"2023","journal-title":"arXiv:2309.08173"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.165"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2023.3247602"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/3511710"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.223"},{"key":"ref164","article-title":"FewFedWeight: Few-shot federated learning framework across multiple NLP tasks","author":"Dong","year":"2022","journal-title":"arXiv:2212.08354"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1145\/3570361.3592505"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3166101"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.488"},{"key":"ref168","article-title":"Profit: Benchmarking personalization and robustness trade-off in federated prompt tuning","author":"Collins","year":"2023","journal-title":"arXiv:2310.04627"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i10.29007"},{"key":"ref170","article-title":"FedRA: A random allocation strategy for federated tuning to unleash the power of heterogeneous clients","author":"Su","year":"2023","journal-title":"arXiv:2311.11227"},{"key":"ref171","article-title":"FedLoRA: Model-heterogeneous personalized federated learning with LoRa tuning","author":"Yi","year":"2023","journal-title":"arXiv:2310.13283"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.01755"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.717"},{"key":"ref174","article-title":"PerAda: Parameter-efficient and Generalizable federated learning personalization with guarantees","author":"Xie","year":"2023","journal-title":"arXiv:2302.06637"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1145\/3510033"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/483"},{"key":"ref177","article-title":"FedOBD: Opportunistic block dropout for efficiently training large-scale neural networks through federated learning","author":"Chen","year":"2022","journal-title":"arXiv:2208.05174"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00460"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26255"},{"key":"ref180","article-title":"A survey on model compression for large language models","author":"Zhu","year":"2023","journal-title":"arXiv:2308.07633"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1145\/3583780.3615017"},{"key":"ref182","first-page":"48573","article-title":"Knowledge-augmented reasoning distillation for small language models in knowledge-intensive tasks","volume-title":"Proc. 37th Int. Conf. Neural Inf. Process. Syst.","volume":"36","author":"Kang"},{"key":"ref183","article-title":"Bridging the gap between foundation models and heterogeneous federated learning","author":"Yu","year":"2023","journal-title":"arXiv:2310.00247"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/399"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM53939.2023.10228954"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2023.3315066"},{"key":"ref187","doi-asserted-by":"crossref","DOI":"10.36227\/techrxiv.171172909.97532161\/v1","volume-title":"A survey of backpropagation-free training for LLMS","author":"Mei","year":"2024"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/COINS57856.2023.10189239"},{"key":"ref189","first-page":"53038","article-title":"Fine-tuning language models with just forward passes","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","volume":"36","author":"Malladi"},{"key":"ref190","article-title":"Federated fine-tuning of billion-sized language models across mobile devices","author":"Xu","year":"2023","journal-title":"arXiv:2308.13894"},{"key":"ref191","article-title":"ZooPFL: Exploring black-box foundation models for personalized federated learning","author":"Lu","year":"2023","journal-title":"arXiv:2310.05143"},{"key":"ref192","article-title":"FedBPT: Efficient federated black-box prompt tuning for large language models","author":"Sun","year":"2023","journal-title":"arXiv:2310.01467"},{"key":"ref193","article-title":"Federated full-parameter tuning of billion-sized language models with communication cost under 18 kilobytes","author":"Qin","year":"2023","journal-title":"arXiv:2312.06353"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref195","first-page":"14774","article-title":"Deep leakage from gradients","volume-title":"Proc. 33rd Conf. Neural Inf. Process. Syst.","volume":"32","author":"Zhu"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.001.2300140"},{"key":"ref197","first-page":"2687","article-title":"Leakage of dataset properties in multi-party machine learning","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Zhang"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.119480"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3309095"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00095"},{"key":"ref201","first-page":"29898","article-title":"Gradient inversion with generative image prior","volume-title":"Proc. 35th Conf. Neural Inf. Process. Syst.","volume":"34","author":"Jeon"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS51616.2021.00081"},{"key":"ref203","first-page":"6381","article-title":"Gradient obfuscation gives a false sense of security in federated learning","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Yue"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/BIBM58861.2023.10385829"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.findings-emnlp.305"},{"key":"ref206","first-page":"7641","article-title":"LAMP: Extracting text from gradients with language model priors","volume-title":"Proc. 36th Conf. Neural Inf. Process. Syst.","volume":"35","author":"Balunovic"},{"key":"ref207","first-page":"8130","article-title":"Recovering private text in federated learning of language models","volume-title":"Proc. 36th Conf. Neural Inf. Process. Syst.","volume":"35","author":"Gupta"},{"key":"ref208","article-title":"Decepticons: Corrupted transformers breach privacy in federated learning for language models","author":"Fowl","year":"2022","journal-title":"arXiv:2201.12675"},{"key":"ref209","volume-title":"FLAT-ChaT: A word recovery attack on federated language model training","author":"Xu","year":"2023"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref212","first-page":"1","article-title":"Membership inference attacks against NLP classification models","volume-title":"Proc. 35th Conf. Workshop Privacy Mach. Learn. NeurIPS","author":"Shejwalkar"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1109\/BigData55660.2022.10020711"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10095991"},{"key":"ref215","first-page":"1","article-title":"Scalable membership inference attacks via quantile regression","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","volume":"36","author":"Bertran"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00449"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417270"},{"key":"ref218","article-title":"Efficient estimation of word representations in vector space","author":"Mikolov","year":"2013","journal-title":"arXiv:1301.3781"},{"key":"ref219","article-title":"Bag of tricks for efficient text classification","author":"Joulin","year":"2016","journal-title":"arXiv:1607.01759"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1162"},{"key":"ref221","volume-title":"Large text compression benchmark","author":"Mahoney","year":"2009"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-2029"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.emnlp-main.570"},{"key":"ref224","first-page":"318","article-title":"Using membership inference attacks to evaluate privacy-preserving language modeling fails for pseudonymizing data","volume-title":"Proc. 24th Nordic Conf. Comput. Linguist. (NoDaLiDa)","author":"Vakili"},{"key":"ref225","article-title":"Membership inference attack susceptibility of clinical language models","author":"Jagannatha","year":"2021","journal-title":"arXiv:2104.08305"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330885"},{"key":"ref227","article-title":"Did the neurons read your book? Document-level membership inference for large language models","author":"Meeus","year":"2023","journal-title":"arXiv:2310.15007"},{"key":"ref228","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2024-0075"},{"key":"ref230","article-title":"Beyond memorization: Violating privacy via inference with large language models","author":"Staab","year":"2023","journal-title":"arXiv:2310.07298"},{"key":"ref231","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2745201"},{"key":"ref233","first-page":"6003","article-title":"Differentially-private federated linear bandits","volume-title":"Proc. 34th. Neural Inf. Process. Syst.","volume":"33","author":"Dubey"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1109\/iMETA59369.2023.10294469"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2945367"},{"key":"ref236","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2019.8761267"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1177\/1550147720919698"},{"key":"ref238","first-page":"2351","article-title":"Ensemble distillation for robust model fusion in federated learning","volume-title":"Proc. 35th Conf. Neural Inf. Process. Syst.","volume":"33","author":"Lin"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2023.103827"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00770"},{"key":"ref241","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-022-00774-w"},{"key":"ref242","doi-asserted-by":"publisher","DOI":"10.1145\/3620667"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref244","article-title":"Benchmarking differential privacy and federated learning for bert models","author":"Basu","year":"2021","journal-title":"arXiv:2106.13973"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.econlp-1.7"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1145\/3682068"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48910-X_16"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1985.1057074"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1982.38"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1986.25"},{"key":"ref251","article-title":"How to exchange secrets with oblivious transfer","author":"Rabin","year":"2005"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2484326"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1145\/1807167.1807247"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2803782"},{"key":"ref256","first-page":"1605","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Secur.)","author":"Fang"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00057"},{"key":"ref258","first-page":"261","article-title":"Fall of empires: Breaking Byzantine-tolerant SGD by inner product manipulation","volume-title":"Proc. 35th Uncertainty Artif. Intell.","author":"Xie"},{"key":"ref259","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref260","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109629"},{"key":"ref261","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109512"},{"key":"ref262","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01574"},{"key":"ref263","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612474"},{"key":"ref264","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00030"},{"key":"ref265","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2023.10.007"},{"key":"ref266","doi-asserted-by":"publisher","DOI":"10.1109\/CNS59707.2023.10288938"},{"key":"ref267","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2020.3012952"},{"key":"ref268","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2023.3237397"},{"key":"ref269","first-page":"10495","article-title":"Zeno++: Robust fully asynchronous SGD","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xie"},{"key":"ref270","first-page":"1","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. 31st Conf. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard"},{"key":"ref271","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in Byzantium","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","author":"El Mhamdi"},{"key":"ref272","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"},{"key":"ref273","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS49936.2021.00075"},{"key":"ref274","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS57875.2023.00012"},{"key":"ref275","first-page":"16","article-title":"Exploiting machine learning to subvert your spam filter","volume-title":"Proc. LEET","author":"Nelson"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_5"},{"key":"ref277","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"ref278","first-page":"25278","article-title":"LAION-5B: An open large-scale dataset for training next generation image-text models","volume-title":"Proc. 36th Int. Conf. Neural Inf. Process. Syst.","volume":"35","author":"Schuhmann"},{"key":"ref279","volume-title":"COYO-700M: Image-text pair dataset","author":"Byeon","year":"2022"},{"key":"ref280","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00179"},{"key":"ref281","first-page":"1577","article-title":"Poisoning the unlabeled dataset of semi-supervised learning","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Carlini"},{"key":"ref282","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3361661"},{"key":"ref283","article-title":"Backdoor attacks for in-context learning with language models","author":"Kandpal","year":"2023","journal-title":"arXiv:2307.14692"},{"key":"ref284","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612032"},{"key":"ref285","article-title":"FedMLSecurity: A benchmark for attacks and defenses in federated learning and LLMs","author":"Han","year":"2023","journal-title":"arXiv:2306.04959"},{"key":"ref286","article-title":"Unveiling backdoor risks brought by foundation models in heterogeneous federated learning","author":"Li","year":"2023","journal-title":"arXiv:2311.18350"},{"key":"ref287","first-page":"1","article-title":"Backdoor threats from compromised foundation models to federated learning","volume-title":"Proc. 37th Int. Workshop Federated Learn. Age Found. Models Conjunct. NeurIPS","author":"Li"},{"key":"ref288","article-title":"Vulnerabilities of foundation model integrated federated learning under adversarial threats","author":"Wu","year":"2024","journal-title":"arXiv:2401.10375"},{"key":"ref289","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2023.10.034"},{"key":"ref290","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP48485.2024.10446717"},{"key":"ref291","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"ref292","doi-asserted-by":"publisher","DOI":"10.4236\/jsea.2024.171003"},{"key":"ref293","first-page":"1","article-title":"Backdooring instruction-tuned large language models with virtual prompt injection","volume-title":"Proc. NeurIPS Workshop Backdoors Deep, Learn.-Good, Bad, Ugly","author":"Yan"},{"key":"ref294","first-page":"1","article-title":"Jailbroken: How does LLM safety training fail?","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","volume":"36","author":"Wei"},{"key":"ref295","article-title":"On the robustness of ChatGPT: An adversarial and out-of-distribution perspective","author":"Wang","year":"2023","journal-title":"arXiv:2302.12095"},{"key":"ref296","first-page":"2633","article-title":"Extracting training data from large language models","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Carlini"},{"key":"ref297","article-title":"User modeling in the era of large language models: Current research and future directions","author":"Tan","year":"2023","journal-title":"arXiv:2312.11518"},{"key":"ref298","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30120"},{"key":"ref299","article-title":"Prompt injection attacks and defenses in LLM-integrated applications","author":"Liu","year":"2023","journal-title":"arXiv:2310.12815"},{"key":"ref300","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2024.3377655"},{"key":"ref301","doi-asserted-by":"publisher","DOI":"10.1145\/3561048"},{"key":"ref302","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3294569"},{"key":"ref303","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00353"},{"key":"ref304","doi-asserted-by":"publisher","DOI":"10.1109\/DAC56929.2023.10247993"},{"key":"ref305","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00027"},{"key":"ref306","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3117837"},{"key":"ref307","first-page":"797","article-title":"Optimizing dynamic neural networks with brainstorm","volume-title":"Proc. 17th USENIX Symp. Oper. Syst. Design Implement. (OSDI)","author":"Cui"},{"key":"ref308","first-page":"1","article-title":"SparseGPT: Massive language models can be accurately pruned in one-shot","volume-title":"Proc. 40th Int. Conf. Mach. Learn.","author":"Frantar"},{"key":"ref309","first-page":"21702","article-title":"LLM-Pruner: On the structural pruning of large language models","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","volume":"36","author":"Ma"},{"key":"ref310","first-page":"1","article-title":"QLORA: Efficient finetuning of quantized LLMs","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","volume":"36","author":"Dettmers"},{"key":"ref311","first-page":"38087","article-title":"Smoothquant: Accurate and efficient post-training quantization for large language models","volume-title":"Proc. 40th Int. Conf. Mach. Learn.","author":"Xiao"},{"key":"ref312","first-page":"65517","article-title":"Response length perception and sequence scheduling: An LLM-empowered LLM inference pipeline","volume-title":"Proc. 37th Int. Neural Inf. Process. Syst.","volume":"36","author":"Zheng"},{"key":"ref313","first-page":"1","article-title":"Scissorhands: Exploiting the persistence of importance hypothesis for LLM KV cache compression at test time","volume-title":"Proc. 37th Conf. Neural Inf. Process. Syst.","volume":"36","author":"Liu"},{"key":"ref314","doi-asserted-by":"publisher","DOI":"10.1145\/3570361.3592517"},{"key":"ref315","volume-title":"GPT-4o: The cutting-edge advancement in multimodal LLM","author":"Islam","year":"2024"},{"key":"ref316","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2010.11929"},{"key":"ref317","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01457"},{"key":"ref318","article-title":"Personal LLM agents: Insights and survey about the capability, efficiency and security","author":"Li","year":"2024","journal-title":"arXiv:2401.05459"},{"key":"ref319","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00534"},{"key":"ref320","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS58808.2023.10374576"},{"key":"ref321","article-title":"Attacking LLM watermarks by exploiting their strengths","author":"Pang","year":"2024","journal-title":"arXiv:2402.16187"},{"key":"ref322","article-title":"The frontier of data erasure: Machine unlearning for large language models","author":"Qu","year":"2024","journal-title":"arXiv:2403.15779"},{"key":"ref323","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2025.3594687"},{"key":"ref324","article-title":"Can sensitive information be deleted from LLMS? Objectives for defending against extraction attacks","author":"Patil","year":"2023","journal-title":"arXiv:2309.17410"},{"key":"ref325","article-title":"PISTOL: Dataset compilation pipeline for structural unlearning of LLMs","author":"Qiu","year":"2024","journal-title":"arXiv:2406.16810"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/9739\/11123909\/10759678.pdf?arnumber=10759678","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,15]],"date-time":"2025-08-15T18:23:28Z","timestamp":1755282208000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10759678\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8]]},"references-count":325,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/comst.2024.3503680","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8]]}}}