Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions.

This research article seeks to exploit vulnerabilities in using Github Copilot for paired human-artificial intelligence code generation. The method employs MITRE’s top 25 Common Weakness Enumeration (CWE) list to evaluate Copilot’s performance in regards to three areas- diversity of weakness, divers...

Descripción completa

Detalles Bibliográficos
Publicado en:	Communications of the ACM Vol. 68; no. 2; pp. 96 - 106
Autores principales:	Pearce, Hammond, Ahmad, Baleegh, Tan, Benjamin, Dolan-Gavitt, Brendan, Karri, Ramesh
Formato:	Artículo
Publicado:	Association for Computing Machinery Feb2025
Materias:	Human-artificial intelligence interaction Computer programming Github Inc. Computer security vulnerabilities Programming languages
Acceso en línea:	Ver este registro en EBSCOhost

Descripción
Sumario:	This research article seeks to exploit vulnerabilities in using Github Copilot for paired human-artificial intelligence code generation. The method employs MITRE’s top 25 Common Weakness Enumeration (CWE) list to evaluate Copilot’s performance in regards to three areas- diversity of weakness, diversity of prompt, and diversity of domain. The discussion of the results includes an overview on threats to validity of the results including CWE and scenario inclusion and reproducibility of code generated.