Secure coding for web applications: Frameworks, challenges, and the role of LLMs
Fuente:
arXiv
Salvato in:
| Autori principali: | , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2025
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866914068994981888 |
|---|---|
| author | Kiashemshaki, Kiana Torkamani, Mohammad Jalili Mahmoudi, Negin |
| author_facet | Kiashemshaki, Kiana Torkamani, Mohammad Jalili Mahmoudi, Negin |
| contents | Secure coding is a critical yet often overlooked practice in software development. Despite extensive awareness efforts, real-world adoption remains inconsistent due to organizational, educational, and technical barriers. This paper provides a comprehensive review of secure coding practices across major frameworks and domains, including web development, DevSecOps, and cloud security. It introduces a structured framework comparison and categorizes threats aligned with the OWASP Top 10. Additionally, we explore the rising role of Large Language Models (LLMs) in evaluating and recommending secure code, presenting a reproducible case study across four major vulnerability types. This paper offers practical insights for researchers, developers, and educators on integrating secure coding into real-world development processes. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2507_22223 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Secure coding for web applications: Frameworks, challenges, and the role of LLMs Kiashemshaki, Kiana Torkamani, Mohammad Jalili Mahmoudi, Negin Software Engineering D.2; D.2.4; D.4.6; I.2.7 Secure coding is a critical yet often overlooked practice in software development. Despite extensive awareness efforts, real-world adoption remains inconsistent due to organizational, educational, and technical barriers. This paper provides a comprehensive review of secure coding practices across major frameworks and domains, including web development, DevSecOps, and cloud security. It introduces a structured framework comparison and categorizes threats aligned with the OWASP Top 10. Additionally, we explore the rising role of Large Language Models (LLMs) in evaluating and recommending secure code, presenting a reproducible case study across four major vulnerability types. This paper offers practical insights for researchers, developers, and educators on integrating secure coding into real-world development processes. |
| title | Secure coding for web applications: Frameworks, challenges, and the role of LLMs |
| topic | Software Engineering D.2; D.2.4; D.4.6; I.2.7 |
| url | https://arxiv.org/abs/2507.22223 |