Copertina

Is GitHub's Copilot as Bad as Humans at Introducing Vulnerabilities in Code?

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Asare, Owura, Nagappan, Meiyappan, Asokan, N.
Natura:	Preprint
Pubblicazione:	2022
Soggetti:	Software Engineering Cryptography and Security
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

A User-centered Security Evaluation of Copilot
di: Asare, Owura, et al.
Pubblicazione: (2023)

Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
di: Fu, Yujia, et al.
Pubblicazione: (2023)

Measuring the Runtime Performance of C++ Code Written by Humans using GitHub Copilot
di: Erhabor, Daniel, et al.
Pubblicazione: (2023)

Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot
di: Ferreyra, Nicolás E. Díaz, et al.
Pubblicazione: (2026)

Unpacking Security Scanners for GitHub Actions Workflows
di: Fares, Madjda, et al.
Pubblicazione: (2026)

On the effectiveness of Large Language Models for GitHub Workflows
di: Zhang, Xinyu, et al.
Pubblicazione: (2024)

LLM-Enabled Open-Source Systems in the Wild: An Empirical Study of Vulnerabilities in GitHub Security Advisories
di: Shifat, Fariha Tanjim, et al.
Pubblicazione: (2026)

Characterizing and Modeling the GitHub Security Advisories Review Pipeline
di: Segal, Claudio, et al.
Pubblicazione: (2026)

Exploring User Privacy Awareness on GitHub: An Empirical Study
di: Alfieri, Costanza, et al.
Pubblicazione: (2024)

Can Highlighting Help GitHub Maintainers Track Security Fixes?
di: Liu, Xueqing, et al.
Pubblicazione: (2024)

Unveiling A Hidden Risk: Exposing Educational but Malicious Repositories in GitHub
di: Masud, Md Rayhanul, et al.
Pubblicazione: (2024)

On the Prevalence and Usage of Commit Signing on GitHub: A Longitudinal and Cross-Domain Study
di: Sharma, Anupam, et al.
Pubblicazione: (2025)

Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
di: Siddiq, Mohammed Latif, et al.
Pubblicazione: (2026)

Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows
di: Ruan, Bonan, et al.
Pubblicazione: (2026)

Automating the Detection of Code Vulnerabilities by Analyzing GitHub Issues
di: Cipollone, Daniele, et al.
Pubblicazione: (2025)

IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports
di: Rahman, Md Nafiu, et al.
Pubblicazione: (2026)

Bugdar: AI-Augmented Secure Code Review for GitHub Pull Requests
di: Naulty, John, et al.
Pubblicazione: (2025)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
di: He, Hao, et al.
Pubblicazione: (2024)

LLbezpeky: Leveraging Large Language Models for Vulnerability Detection
di: Mathews, Noble Saji, et al.
Pubblicazione: (2024)

FuzzSlice: Pruning False Positives in Static Analysis Warnings Through Function-Level Fuzzing
di: Murali, Aniruddhan, et al.
Pubblicazione: (2024)

Backdoors in Code Summarizers: How Bad Is It?
di: Wang, Chenyu, et al.
Pubblicazione: (2025)

GitHub Copilot: the perfect Code compLeeter?
di: Siroš, Ilja, et al.
Pubblicazione: (2024)

Revisiting the Performance of Deep Learning-Based Vulnerability Detection on Realistic Datasets
di: Chakraborty, Partha, et al.
Pubblicazione: (2024)

Models Are Codes: Towards Measuring Malicious Code Poisoning Attacks on Pre-trained Model Hubs
di: Zhao, Jian, et al.
Pubblicazione: (2024)

AddressWatcher: Sanitizer-Based Localization of Memory Leak Fixes
di: Murali, Aniruddhan, et al.
Pubblicazione: (2024)

Unsupervised Binary Code Translation with Application to Code Similarity Detection and Vulnerability Discovery
di: Ahmad, Iftakhar, et al.
Pubblicazione: (2024)

What Makes a GitHub Issue Ready for Copilot?
di: Sayagh, Mohammed
Pubblicazione: (2025)

Impact of Code Transformation on Detection of Smart Contract Vulnerabilities
di: Manh, Cuong Tran, et al.
Pubblicazione: (2024)

Lightweight Vulnerability Detection from Code Metrics and Token Features
di: Chiu, Chun Yin
Pubblicazione: (2026)

Exploring the Effect of Multiple Natural Languages on Code Suggestion Using GitHub Copilot
di: Koyanagi, Kei, et al.
Pubblicazione: (2024)

A Slicing-Based Approach for Detecting and Patching Vulnerable Code Clones
di: Alomari, Hakam, et al.
Pubblicazione: (2025)

MegaVul: A C/C++ Vulnerability Dataset with Comprehensive Code Representation
di: Ni, Chao, et al.
Pubblicazione: (2024)

Assessing Vulnerability in Smart Contracts: The Role of Code Complexity Metrics in Security Analysis
di: Tehrani, Masoud Jamshidiyan
Pubblicazione: (2024)

Similar but Patched Code Considered Harmful -- The Impact of Similar but Patched Code on Recurring Vulnerability Detection and How to Remove Them
di: Tan, Zixuan, et al.
Pubblicazione: (2024)

Introducing Traceability in GitHub for Medical Software Development
di: Stirbu, Vlad, et al.
Pubblicazione: (2021)

When Labels Are Scarce: A Systematic Mapping of Label-Efficient Code Vulnerability Detection
di: Khalal, Noor, et al.
Pubblicazione: (2026)

Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software
di: Ponta, Serena E., et al.
Pubblicazione: (2018)

CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics
di: Li, Yikun, et al.
Pubblicazione: (2024)

Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
di: Hermann, Kevin, et al.
Pubblicazione: (2026)

How Code Representation Shapes False-Positive Dynamics in Cross-Language LLM Vulnerability Detection
di: Chen, Maofei, et al.
Pubblicazione: (2026)