LATIDIA · Ciberseguridad

Un marco de evaluación de riesgos de seguridad para herramientas de desarrollo impulsadas por IA

arXiv: 2609.18658v1Tipo de anuncio: nuevo Resumen: las herramientas de desarrollo impulsadas por IA ahora se utilizan ampliamente para generar código y ayudar a los desarrolladores con las tareas de programación de rutina. Aunque el trabajo existente ha identificado vulnerabilidades

La noticia

arXiv:2609.18658v1 Announce Type: new Abstract: AI-powered development tools are now widely used to generate code and assist developers with routine programming tasks. Although existing work has identified vulnerabilities in AI-generated code, security-oriented work is often focused on vulnerability detection rather than risk assessment. To address this gap, this paper presents a Security Risk Assessment Framework (SRF) to evaluate the security risks of AI-generated code. SRF combines threat modeling, security analysis, and a quantitative risk evaluation approach based on vulnerability criticality. The framework is applied to a set of security-relevant programming tasks, where code generated by multiple AI-powered development tools is analyzed using Bandit and Semgrep. The results show that AI-generated