Do users write more insecure code with AI assistants?

N Perry, M Srivastava, D Kumar, D Boneh - Proceedings of the 2023 …, 2023 - dl.acm.org
Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications …, 2023dl.acm.org
AI code assistants have emerged as powerful tools that can aid in the software development
life-cycle and can improve developer productivity. Unfortunately, such assistants have also
been found to produce insecure code in lab environments, raising significant concerns
about their usage in practice. In this paper, we conduct a user study to examine how users
interact with AI code assistants to solve a variety of security related tasks. Overall, we find
that participants who had access to an AI assistant wrote significantly less secure code than …
AI code assistants have emerged as powerful tools that can aid in the software development life-cycle and can improve developer productivity. Unfortunately, such assistants have also been found to produce insecure code in lab environments, raising significant concerns about their usage in practice. In this paper, we conduct a user study to examine how users interact with AI code assistants to solve a variety of security related tasks. Overall, we find that participants who had access to an AI assistant wrote significantly less secure code than those without access to an assistant. Participants with access to an AI assistant were also more likely to believe they wrote secure code, suggesting that such tools may lead users to be overconfident about security flaws in their code. To better inform the design of future AI-based code assistants, we release our user-study apparatus to researchers seeking to build on our work.
ACM Digital Library
Показан е най-добрият резултат за това търсене. Показване на всички резултати