LATIDIA · Ciberseguridad

(No) confiar, pero (no) verificar: la atención de los desarrolladores a la seguridad en el código generado por IA

arXiv: 2609.21020v1Tipo de anuncio: nuevo Resumen: los asistentes de codificación de IA están transformando rápidamente el desarrollo de software, pero se sabe que producen código inseguro. El trabajo anterior ha medido si los desarrolladores asistidos por IA producen

La noticia

arXiv:2609.21020v1 Announce Type: new Abstract: AI coding assistants are rapidly transforming software development, but are known to produce insecure code. Prior work has measured whether AI-assisted developers produce secure code, but less is known about how they evaluate AI-generated code: whether they can identify vulnerabilities, what cues they use, and how trust shapes their decisions. This evaluation step is foundational to secure development with AI, whether using auto-complete, chat tools, or AI agents. As a first step, we conducted a remote observational study with 100 participants isolating this evaluation stage. Participants were tasked with producing secure and functional code for four C linked-list tasks. For each, participants were able to