Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions.

This research article seeks to exploit vulnerabilities in using Github Copilot for paired human-artificial intelligence code generation. The method employs MITRE’s top 25 Common Weakness Enumeration (CWE) list to evaluate Copilot’s performance in regards to three areas- diversity of weakness, divers...

Full description

Bibliographic Details

Published in:	Communications of the ACM Vol. 68; no. 2; pp. 96 - 106
Main Authors:	Pearce, Hammond, Ahmad, Baleegh, Tan, Benjamin, Dolan-Gavitt, Brendan, Karri, Ramesh
Format:	Article
Published:	Association for Computing Machinery Feb2025
Subjects:	Human-artificial intelligence interaction Computer programming Github Inc. Computer security vulnerabilities Programming languages
Online Access:	View this record in EBSCOhost