Search papers, labs, and topics across Lattice.
This paper analyzes the intersection of traditional web vulnerabilities and new threats introduced by large language models (LLMs), highlighting how LLM-mediated interactions can exacerbate issues like cross-site scripting and prompt injection. It provides a comprehensive framework for understanding these risks across various layers of web applications and evaluates existing defenses, revealing their limitations. Key findings include the identification of three major challenges in securing LLM-enabled environments and the proposal of a novel monitoring and control framework to address these vulnerabilities.
LLMs not only introduce new vulnerabilities but also amplify existing web threats, necessitating a paradigm shift in how we secure online interactions.
Large language models (LLMs) are becoming integral to web applications and browser agents, transforming online interactions while introducing new attack vectors and reshaping longstanding web vulnerabilities. Classical threats such as cross-site scripting (XSS) can be amplified through LLM-mediated interactions, while LLM-specific vulnerabilities can propagate across web applications, introducing attacks such as prompt injection. Securing modern web systems therefore requires understanding interactions between traditional and LLM-specific threats across the system lifecycle. Unlike prior surveys treating web and LLM security separately, this survey provides a unified analysis of how LLMs amplify web vulnerabilities across client-side, server-side, and pipeline layers while evaluating defenses and their limitations. The analysis examines extending NIST and ISO/IEC AI security frameworks to the security needs of LLM-enabled web environments. Three unresolved challenges are identified: adversarial natural-language instructions, autonomous agent security, and post-deployment security through continuous monitoring and adaptation. An LLM-aware monitoring and control framework is proposed, integrating semantic input validation, prompt integrity protection, output isolation, agent governance, and runtime monitoring. This unified perspective characterizes the evolving threat landscape and outlines future directions for secure AI-enabled web systems.
