October 2024
·
5 Reads
·
1 Citation
This page lists works of an author who doesn't have a ResearchGate profile or hasn't added the works to their profile yet. It is automatically generated from public (personal) data to further our legitimate goal of comprehensive and accurate scientific recordkeeping. If you are this author and want this page removed, please let us know.
October 2024
·
5 Reads
·
1 Citation
August 2024
·
39 Reads
·
1 Citation
ChatGPT has enabled third-party developers to create plugins to expand ChatGPT's capabilities.These plugins are distributed through OpenAI's plugin store, making them easily accessible to users. With ChatGPT as the backbone, this app ecosystem has illustrated great business potential by offering users personalized services in a conversational manner. Nonetheless, many crucial aspects regarding app development, deployment, and security of this ecosystem have yet to be thoroughly studied in the research community, potentially hindering a broader adoption by both developers and users. In this work, we conduct the first comprehensive study of the ChatGPT app ecosystem, aiming to illuminate its landscape for our research community. Our study examines the distribution and deployment models in the integration of LLMs and third-party apps, and assesses their security and privacy implications. We uncover an uneven distribution of functionality among ChatGPT plugins, highlighting prevalent and emerging topics. We also identify severe flaws in the authentication and user data protection for third-party app APIs integrated within LLMs, revealing a concerning status quo of security and privacy in this app ecosystem. Our work provides insights for the secure and sustainable development of this rapidly evolving ecosystem.
... Zhang et al. [44] conducted an initial analysis of GPTs distribution and potential vulnerabilities, while Su et al. [33] provided comprehensive mining of the GPT Store, examining app characteristics and user engagement. Additionally, Yan et al. [41] explored the GPT Store ecosystem, focusing on distribution, deployment, and security aspects. To support further research, Hou et al. [18] introduced GPTZoo, a dataset containing over 730,000 GPT instances. ...
Reference:
LLM App Squatting and Cloning
October 2024