Image de couverture de livre

Can Developers rely on LLMs for Secure IaC Development?

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Firouzi, Ehsan, Bhatt, Shardul, Ghafari, Mohammad
Format:	Preprint
Publié:	2026
Sujets:	Cryptography and Security
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Persistent Human Feedback, LLMs, and Static Analyzers for Secure Code Generation and Vulnerability Detection
par: Firouzi, Ehsan, et autres
Publié: (2026)

Time to Separate from StackOverflow and Match with ChatGPT for Encryption
par: Firouzi, Ehsan, et autres
Publié: (2024)

From Struggle to Simplicity with a Usable and Secure API for Encryption in Java
par: Firouzi, Ehsan, et autres
Publié: (2024)

ChatGPT's Potential in Cryptography Misuse Detection: A Comparative Analysis with Static Analysis Tools
par: Firouzi, Ehsan, et autres
Publié: (2024)

LLM Security Guard for Code
par: Kavian, Arya, et autres
Publié: (2024)

IntelliSA: An Intelligent Static Analyzer for IaC Security Smell Detection Using Symbolic Rules and Neural Inference
par: Mei, Qiyue, et autres
Publié: (2026)

The Dilemma of Privacy Protection for Developers in the Metaverse
par: Rahartomo, Argianto, et autres
Publié: (2025)

Detection of security smells in IaC scripts through semantics-aware code and language processing
par: War, Aicha, et autres
Publié: (2025)

Security Bug Report Prediction Within and Across Projects: A Comparative Study of BERT and Random Forest
par: Soltaniani, Farnaz, et autres
Publié: (2025)

Evaluating Large Language Models for Security Bug Report Prediction
par: Soltaniani, Farnaz, et autres
Publié: (2026)

Mining REST APIs for Potential Mass Assignment Vulnerabilities
par: Mazidi, Arash, et autres
Publié: (2024)

Can Agents Secure Hardware? Evaluating Agentic LLM-Driven Obfuscation for IP Protection
par: Ghimire, Sujan, et autres
Publié: (2026)

Think Broad, Act Narrow: CWE Identification with Multi-Agent Large Language Models
par: Sayagh, Mohammed, et autres
Publié: (2025)

Poisoned Source Code Detection in Code Models
par: Ghannoum, Ehab, et autres
Publié: (2025)

Phishing Awareness via Game-Based Learning
par: Rahartomo, Argianto, et autres
Publié: (2025)

Benchmarking Prompt Engineering Techniques for Secure Code Generation with GPT Models
par: Bruni, Marc, et autres
Publié: (2025)

Metaverse Security and Privacy Research: A Systematic Review
par: Rahartomo, Argianto, et autres
Publié: (2025)

From Data Leak to Secret Misses: The Impact of Data Leakage on Secret Detection Models
par: Soltaniani, Farnaz, et autres
Publié: (2026)

Automated Testing of Broken Authentication Vulnerabilities in Web APIs with AuthREST
par: Corradini, Davide, et autres
Publié: (2025)

Gameful Introduction to Cryptography for Dyslexic Students
par: Rahartomo, Argianto, et autres
Publié: (2024)

Can LLMs Patch Security Issues?
par: Alrashedy, Kamel, et autres
Publié: (2023)

Architectural Design for Secure Smart Contract Development
par: Lewis, Myles, et autres
Publié: (2024)

A Quasi-Experimental Developer Study of Security Training in LLM-Assisted Web Application Development
par: Kharma, Mohammed, et autres
Publié: (2026)

zk-IoT: Securing the Internet of Things with Zero-Knowledge Proofs on Blockchain Platforms
par: Ramezan, Gholamreza, et autres
Publié: (2024)

Lightweight Dataset for Decoy Development to Improve IoT Security
par: Weissman, David, et autres
Publié: (2024)

LLMs, You Can Evaluate It! Design of Multi-perspective Report Evaluation for Security Operation Centers
par: Okada, Hiroyuki, et autres
Publié: (2026)

Critical Infrastructure Security: Penetration Testing and Exploit Development Perspectives
par: Orleans-Bosomtwe, Papa Kobina
Publié: (2024)

Pick and Sort for Graphical Authentication
par: Rahartomo, Argianto, et autres
Publié: (2026)

ModelForge: Using GenAI to Improve the Development of Security Protocols
par: Duclos, Martin, et autres
Publié: (2025)

(In)Security of Mobile Apps in Developing Countries: A Systematic Literature Review
par: Diallo, Alioune, et autres
Publié: (2024)

LLMs for Secure IaC
par: Ananymous
Publié: (2025)

Developing and Evaluating Lightweight Cryptographic Algorithms for Secure Embedded Systems in IoT Devices
par: Sedraoui, Brahim Khalil, et autres
Publié: (2026)

On Securing the Software Development Lifecycle in IoT RISC-V Trusted Execution Environments
par: Wilde, Annika, et autres
Publié: (2026)

Cracking IoT Security: Can LLMs Outsmart Static Analysis Tools?
par: Quantrill, Jason, et autres
Publié: (2026)

Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers
par: Andreina, Sébastien, et autres
Publié: (2024)

Secure Development of a Hooking-Based Deception Framework Against Keylogging Techniques
par: Sajid, Md Sajidul Islam, et autres
Publié: (2025)

Unencrypted Flying Objects: Security Lessons from University Small Satellite Developers and Their Code
par: McAmis, Rachel, et autres
Publié: (2025)

Enhancing Software Supply Chain Resilience: Strategy For Mitigating Software Supply Chain Security Risks And Ensuring Security Continuity In Development Lifecycle
par: Akinsola, Ahmed, et autres
Publié: (2024)

Trust, but Verify: Evaluating Developer Behavior in Mitigating Security Vulnerabilities in Open-Source Software Projects
par: de Sousa, Janislley Oliveira, et autres
Publié: (2024)

Exploring Advanced Methodologies in Security Evaluation for LLMs
par: Huang, Jun, et autres
Publié: (2024)