Skip to content

GitHub Copilot and Code Security: An Empirical Evaluation in the Context of Developers' Professional Experience

2026 · HCII · pp. 605-618 · 1 citation · 38 references
Computer Science

TL;DR

It was found that most participants wrote inse-cure code, regardless of their levels of experience, when using an AI tool (GitHub Copilot), and the two groups differed in how they use the AI tool when writing code.

View source

Similar papers

Preprint Aug 2026

Comparing the Quality of Code Generated by Vibe Coding Tools

This study compares the structural quality of code produced by three widely adopted vibe coding tools --- Lovable, v0, and Replit --- starting from a single generation prompt and suggests that choosing between vibe coding tools involves structural trade-offs that go beyond perceived productivity.

Gustavo Rubin da Mota, Kiev Gama · 0 citations
Open access 2026

An Empirical Study on the Effectiveness of Large Language Models for Automated Software Development Tasks

This research investigates the possibility of replacing junior and intermediate programmers with artificial intelligence (AI)-based tools in the code generation process. To inspect the capabilities of these tools, the Qwen Coder tool was used to conduct the tests. The methodology used in the study is based on 10 tests,...

M. Pantilică, Corina Ene · 0 citations
Book Open access Oct 2026

AIALIB: A Threat Library for AI-Generated Code

Large language models (LLMs) are increasingly integrated into software development workflows, yet a growing body of evidence shows that the code they generate often contains security vulnerabilities. Prior work has primarily focused on measuring the prevalence of such issues, providing useful evidence of risk but limit...

Ali Aljaberi, Jian Kang, You-Cheng Sun · 0 citations
Preprint Oct 2026

Applying Security by Design at the Point of Execution: How Governed Security Requirements Affect the Security of AI-Generated Code

Security by design asks that security requirements are defined before code is written. Secure-code benchmarks typically measure the opposite situation: the agent receives the task without requirements and is scored with security tests it has not seen. We measured what changes when security requirements, selected from a...

Pedro Farinha · 0 citations
#software testing Book Open access Oct 2026

Using LLM Agents for Security Testing of Compiled Mobile Applications: A Case Study on a Real-World Compiled iOS App

It is concluded that developers should use LLMs at the source-code level to counter adversaries applying the same techniques on decompiled code and research should advance decompilation support for the growing language diversity in the iOS ecosystem.

Fabian Scherf, Florian Magin · 0 citations
Book Open access Oct 2026

Vulnerability Trends across Open-Source AI-Attributed Code

Recent advances in large language models (LLMs) have led to widespread adoption of AI-coding tools and increasing deployment of AI-assisted code. While AI’s potential for programming productivity is becoming evident, the security of AI-attributed code is still poorly understood. In this work, we collect the largest set...

Clarisa Caballero-Ignacio, Lucas Stephens, Josiah Sage et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.