Ocassionally Secure: A Comparative Analysis of Code Generation Assistants
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , , , , , , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866909813702656000 |
|---|---|
| author | Elgedawy, Ran Dosch, Porter Sadik, John Dutta, Senjuti Gautam, Anuj Georgiou, Konstantinos Gholamrezae, Farzin Ji, Fujiao Lim, Kyungchan Liu, Qian Ruoti, Scott |
| author_facet | Elgedawy, Ran Dosch, Porter Sadik, John Dutta, Senjuti Gautam, Anuj Georgiou, Konstantinos Gholamrezae, Farzin Ji, Fujiao Lim, Kyungchan Liu, Qian Ruoti, Scott |
| contents | $ $Large Language Models (LLMs) are being increasingly utilized in various applications, with code generations being a notable example. While previous research has shown that LLMs have the capability to generate both secure and insecure code, the literature does not take into account what factors help generate secure and effective code. Therefore in this paper we focus on identifying and understanding the conditions and contexts in which LLMs can be effectively and safely deployed in real-world scenarios to generate quality code. We conducted a comparative analysis of four advanced LLMs--GPT-3.5 and GPT-4 using ChatGPT and Bard and Gemini from Google--using 9 separate tasks to assess each model's code generation capabilities. We contextualized our study to represent the typical use cases of a real-life developer employing LLMs for everyday tasks as work. Additionally, we place an emphasis on security awareness which is represented through the use of two distinct versions of our developer persona. In total, we collected 61 code outputs and analyzed them across several aspects: functionality, security, performance, complexity, and reliability. These insights are crucial for understanding the models' capabilities and limitations, guiding future development and practical applications in the field of automated code generation. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2402_00689 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Ocassionally Secure: A Comparative Analysis of Code Generation Assistants Elgedawy, Ran Dosch, Porter Sadik, John Dutta, Senjuti Gautam, Anuj Georgiou, Konstantinos Gholamrezae, Farzin Ji, Fujiao Lim, Kyungchan Liu, Qian Ruoti, Scott Cryptography and Security Artificial Intelligence $ $Large Language Models (LLMs) are being increasingly utilized in various applications, with code generations being a notable example. While previous research has shown that LLMs have the capability to generate both secure and insecure code, the literature does not take into account what factors help generate secure and effective code. Therefore in this paper we focus on identifying and understanding the conditions and contexts in which LLMs can be effectively and safely deployed in real-world scenarios to generate quality code. We conducted a comparative analysis of four advanced LLMs--GPT-3.5 and GPT-4 using ChatGPT and Bard and Gemini from Google--using 9 separate tasks to assess each model's code generation capabilities. We contextualized our study to represent the typical use cases of a real-life developer employing LLMs for everyday tasks as work. Additionally, we place an emphasis on security awareness which is represented through the use of two distinct versions of our developer persona. In total, we collected 61 code outputs and analyzed them across several aspects: functionality, security, performance, complexity, and reliability. These insights are crucial for understanding the models' capabilities and limitations, guiding future development and practical applications in the field of automated code generation. |
| title | Ocassionally Secure: A Comparative Analysis of Code Generation Assistants |
| topic | Cryptography and Security Artificial Intelligence |
| url | https://arxiv.org/abs/2402.00689 |